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Harris wins $23 million NSA contract 

BY BRIAN MONROE 
FLORIDA TODAY 

MELBOURNE Harris Corp. has won a potential $23 million contract 
from the National Security Agency for its SecNet 1 1 secure wireless 
network cards that can send encrypted data, voice or video 
transmissions. 

The Melboume-based communications-electronics manufacturer, which 
employs 6,100 people in Brevard County and 10,000 company wide, has 
the only National Security Agency-certified secure wireless card that can 
transmit at a data rate of 1 1 megabits per second. That is faster than 
typical high-speed cable connections of 10 megabits per second. A dial- 
up modem has only 0.056 megabits (or 56 kilobits) per second. 

The contract has an initial $1 .2 million order. In the award, Harris will 
supply personal computer cards, wireless bridges and auxiliary 
equipment such as cables to U.S. government departments or agencies 
and their contractors, NATO, and foreign military customers with valid 
communications security accounts through the National Security 
Agency. 

Experts say, while the contract amount isn't huge by Harris standards - 
the company has landed deals in the billions of dollars - it is significant 
because it shows Harris is trying to strengthen its ties to other 
government sectors not tied to defense. 

"Harris is trying to diversify more of its government work," said 
Lawrence Harris, a telecommunications-equipment analyst for 
Oppenheimer & Co., in New York. "They become a little less dependent 
on the Department of Defense." 

That is important, the analyst said, because the company realizes the 
current rise in defense spending eventually will begin to wane, and it 
will have to rely on its currently struggling commercial divisions and 
other government-related contracts. 
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Arts„&Me^^^ Lawrence Harris said many networks "do have issues relative to 

Surf Scene security. The government doesn't want someone next door tapping into 

Lo dging what should be a secure network. As a consequence, I think Harris could 

Shopping get additional contracts with the government in that area." 



To land a contract with the National Security Agency also "illustrates 
the fact that Harris technology is highly regarded by some of the top 
intelligence agencies in the country. Roughly 40 percent of the sales 
within the company's government communications division is of a 
classified nature." 



Harris officials also think thestrategy is cost-effective. 

By embedding an encryption module into the network access card, the 
need for externally wired equipment is eliminated and users have the 
ability to quickly assemble a network and maintain "wireless 
communications-on-the-move," anywhere in the world, they said. 

"This is a very important contract for Harris in that it expands the 
opportunities for SecNet 1 1 sales to U.S. domestic agencies and also 
opens the door to foreign military sales," said Russ Haney, president, of 
the national programs business unit at Harris' Government 
Communications Systems Division. 



Contact Monroe at 242-3655 or bmonroe@flatoday.net 



>>>> We want to hear from you <<<< 

Story Feedbac k Submit a letter to the Ed it or Subscribe to FLORIDA T ODA Y 




Home I Customer Service | Classifieds | Sitemap | Contact Us 



Use of this site signifies your agreement to the Terms of Service (updated December 2002). 
We invite your comments, questions or advertising inquiries . 

Copyright © 2004 FLORIDA TODAY. 



http://www.floridatoday.com/!NEWSROOM/moneystoryB0707HARRIS2.htm 



8/18/04 



File 348: EUROPEAN PATENTS 1978-2004 /Aug W02 





(c) 


2004 European Patent Office 


File 


34 9: PCT 


FULLTEXT 1979-2002/UB-20040812 , UT-20040805 




(c) 


2004 WlPO/Univentio 


Set 


Items 


Description 


SI 


16144 


MAC OR (MEDIA? ? OR MEDIUM? ? OR MEDIASPECI FIG OR MEDIUMSP- 






ECIFIC) (IW) ACCESS??? ?( IW) ( CONTROL?? ? ? OR CONTROLL??? ?) 


82 


27800 


CRYPTO OR CRYPTOGRAPH? OR CRYPTOS YSTEM? OR ENCRYPT? OR ENC- 






IPHER? OR ENGYPHER? 


S3 


16894 


DECRYPT? OR UNENCRYPT? OR UNENCIPHER? OR UNENCYPHER? OR DE- 






CIPHER? OR DECYPHER? OR UNCRYPT? OR UNCYPHER? OR UNCIPHER? 


S4 


397725 


SECRET? OR SECURE? ? OR SECURING OR SECURITY? 


S5 


263394 


WIRELESS? OR WIRE () LESS OR MOBILE OR LAPTOP? ? OR LAP () TOP? 






? OR TABLET 


S6 


83898 


PORTAB? OR NOTEBOOK 'OR NOTE () BOOK OR NOTEPAD OR THINKPAD OR 






(NOTE OR THINK) () PAD 


S7 


56961 


IPAQ OR PDD OR PDDS OR HPC OR HPCS OR WINCE OR VISOR OR PDA 






OR PDAS OR HANDSPRING OR PIM OR PIMS OR PALMPILOT OR PALMTOP 






OR PALM OR NEWTON OR BLACKBERRY 


S8 


3105 


(PEN OR STYLUS OR POCKET) (2W) (COMPUTER? ? OR DEVICE?) 


S9 


16655 


POCKETPC OR PERSONAL 0 INFORMATION 0 MANAGER? OR PERSONAL ( ) (- 






DIGITAL OR DATA) {) (ASSISTANT? ? OR ORGANI?ER? ?) OR CELLPHONE? 






OR MOBILEPHONE? OR SCREENPHONE? 


SIO 


53665 


(RADIO OR SCREEN OR VIEW? OR SMART OR CELL OR CELLULAR OR - 



MOBILE OR WIRELESS? OR WIRE () LESS?? ? OR FLIP OR DIGITAL) (IW) - 
(TELEPHONE? OR PHONE? ? OR HANDSET? ? OR HAND {) SET? ?) 

511 11138 RADIOPAGER? OR PAGER? OR PAGING (IW) (DEVICE? OR UNIT? ? OR - 

APPARATUS? OR APP?? ? OR TERMINAL? OR APPLIANCE?) 

512 4 64 9 RADIOPHONE? OR VIEWPHONE? OR SMARTPHONE? OR RADIOTELEPHONE? 

513 55 PERSONAL 0 DISPLAY? 0 (DEVICE? OR UNIT?? OR APPARATUS? OR AP- 

P?? ? OR TERMINAL? OR APPLIANCE? OR CLIENT? ? OR PC OR PCS OR 
COMPUTER? ?) 

514 4 36766 SELFCONTAINED OR SELF () CONTAINED OR MOBILE OR PORTABLE OR - 

WIRELESS? OR WIRE () LESS?? ? OR HANDHELD OR HAND () HELD OR POCK- 
ET OR IR OR INFRARED 



S15 


82666 


S14(2W) (CLIENT? ? OR PC OR PCS OR COMPUTER? ? OR DEVICE? OR 
UNIT? ? OR APPARATUS?? OR APP?? ? OR ORGANI?ER? OR TERMINAL? 
OR APPLIANCE?) 


S16 


2563 


(VIDEO OR PICTURE OR MESSAGE OR CAMERA) (IW) (TELEPHONE? OR - 
PHONE? ? OR HANDSET? ? OR HAND () SET? ?) 


S17 


5788 


PALMS I ZE? OR PALMHELD OR HANDY? ? OR FLIPPHONE? OR VIDEOPH- 




ONE? OR PICTUREPHONE? 


S18 


773 


SI {20N)S2:S3 


S19 


1720 


SI (20N) S5 


S20 


42 


S18 (25N) S19 


S21 


1194 


IC='H04K-001' 


S22 


6633 


IC='H04L-009' 


S23 


15 


S18 {20N) (S6:S13 OR S15:S17) 


S24 


6 


S20 AND S21:S22 


S25 


19 


S23: S24 


S26 


19 


IDPAT (sorted in duplicate/non-duplicate order) 


S27 


19 


IDPAT (primary/non-duplicate records only) 


S28 


23 


S20 NOT (S27 OR MESSAG? ( IW) AUTHENTIC? ( IW) CODE? ?) 


S29 


23 


IDPAT (sorted in duplicate/non-duplicate order) 


S30 


23 


IDPAT (primary/non-duplicate records only) 



21/5,K/^ (Item 4 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2004 European Patent Office. All rts. reserv. 



01389675 

Key management methods for wireless lans 

Schlusselverwaltungsverf ahren fur drahtlose lokale Netze 
Precedes de gestion de cle pour reseaux locaux sans fil 

PATENT ASSIGNEE: 

Nokia Inc., (3175140), 6000 Connection Drive, Irving, TX 75039, (US), 
(Applicant designated States: all) 
INVENTOR: 

Stenman, Jorma, Myllarintanhua 6 H 27, 00920 Helsinki, (FI) 

Salvela, Juha, Otakallio 1 C 28, 02150 Espoo, (FI) 

Hansen, Harri, Nokitontunku j a 1 E 34, 02200 Espoo, (FI) 
LEGAL REPRESENTATIVE: 

Simmelvuo, Markku et al (82423), Papula Oy, Patent Agency Papula P.O. Box 
981, 00101 Helsinki, (FI) 
PATENT (CC, No, Kind, Date) : EP 1178644 A2 020206 (Basic) 

EP 1178644 A3 040204 
APPLICATION (CC, No, Date): EP 2001660026 010206; 
PRIORITY (CC, No, Date) : US 502567 000211 

DESIGNATED STATES: AT; BE; CH; CY; DE; DK; ES; FI ; FR; GB; GR; IE; IT; LI; 

LU; MC; NL; PT; SE; TR 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 

INTERNATIONAL PATENT CLASS: H04L-029/06; H04L-012/22; H04L-012/28 

ABSTRACT EP 1178644 A2 

The security keys in the mobile terminals and access points of a 
wireless local area network (WLAN) are created, utilized and managed for 
a communication session between a mobile terminal and access point. Both 
the WLAN link level security protection and IP security functions of the 
network use the same Internet Key Exchange (IKE) key management protocol 
and use certificates in the same certificate hierarchy. When the mobile 
terminals associates with the network, it uses the IKE protocol with 
private keys and certificates to generate WLAN link level keys with the 
access point and provide mutual authentication. 

ABSTRACT WORD COUNT: 98 
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Application: 020206 A2 Published application without search report 

Change: 040128 A2 International Patent Classification changed: 
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...SPECIFICATION are used to protect transmitted data and network elements 
These features include data and signaling encryption at the MAC 
layer, authentication of the mobile terminal when it connects to the 
network, and the authentication of each data packet to assure... 
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Schalterlose Eingangsschaltung fur einen Halbduplexsenderempf anger 
Circuit d' entree sans commutateur pour un emetteur-recepteur semi-duplex 
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ABSTRACT EP 1124337 A2 

In a half-duplex transceiver used in mobile terminals such as cell 
phones, hand-held cellular terminals and laptop computers that require 
two antennas, switches used to select the antennas may be eliminated. 
Instead a bias current is used to condition a PA and LNAs associated with 
antennas to create the communication path. In a system with two antennas 
for receiving and one PA for transmitting the front end is designed so 
that it is possible to receive through either of the antennas or transmit 
through one antenna without having switches in the signal paths to direct 
the signal. During transmission the bias currents of the LNAs associated 
with antennas are turned off and the input impedance of one LNA is such 
that the output power of the PA is directed to an antenna. In a receiving 
state only one of the LNAs is used and the PA bias is turned off. A 
receive path for a selected antenna is chosen by turning on one of the 
LNAs. The PA's impedance is such that if receiving through the selected 
antenna the power is directed to the LNA input associated with it. The 
same method is applied to in LNA outputs. A BT (Bluetooth) module may be 
used in the system by providing access through a switch SI to an antenna 
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...SPECIFICATION listen to the controlled data needed to manage the 

network. However, the other stations cannot decrypt the data portions 
of the packet. Power management is supported at the MAC level for those 
applications requiring mobility under battery operation. Provisions are 
made in the protocol for the portable stations to go to low power 
"sleep" mode during a time interval defined by the... 
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Method for transmitting an encryption number in a communication system and 

a communication system 
Verfahren zur Ubertragung einer Verschlusselungszahl in einem 

Kommunikations system und ein Kommunikations system 
Procede pour transmettre un numero d'encryptage dans un systeme de 

communication et systeme de communication 
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ABSTRACT EP 1111952 A2 

The invention relates to a method for transmitting an encryption number 
in a communication system (1) comprising mobile terminals (MTl (horizontal 
bar)MT4) and at least a first access point (API) and a second access 
point (AP2). The method comprises the steps of defining a set of 
encryption keys, selecting at each said access point (API, AP2) from said 
set of encryption keys one to be used at a time for encrypting 
information to be transmitted between said access point (API, AP2) and 
mobile terminal (MTI (horizontal bar)MT4), transmitting from the access 
point (API, AP2), at intervals, data about the encryption key selected at 
the time, setting up a data transmission connection between a mobile 
terminal (MTl (horizontal bar)MT4) and the first access point (API) for 
the transmission of information, and performing a handover, whereby a 
data transmission connection is set up between the second access point 



(AP2) and the mobile terminal (MTl (horizontal bar)MT4). In the method, 
handover is performed, wherein a data transmission connection is set up 
between the second access point {AP2) and the mobile terminal 

(MTl (horizontal bar)MT4). In the method, in connection with the handove 
information is also transmitted to the mobile terminal (MTl (horizontal 
bar)MT4) about the encryption key selected at the second access point 

(AP2) . 
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...SPECIFICATION the lowermost layer, which takes care of using the radio 
channel in communication between the mobile terminal MTl and the 
access point API, such as encryption and channel allocation in the 
transmission and reception of packets. This description deals primarily 
with data frames FR of the MAC layer. It is obvious that encryption 
operations can also be performed in connection with the other protocol 
layers, but this is... 

...ST, the encryption sequence counter SC is preferably set to indicate t\ 
start of the encryption table ST. 

In the BCCH field of certain MAC frames, the access point API 
transmits information to all mobile terminals connected with the 
access point API in question (broadcast frame) or to some of them. . . 

...the mobile terminal MTl in question. In the sleep mode, the radio part 
of the mobile terminal MTl is set in a power saving mode or turned 
off. The encryption sequence counter SC can, however, be updated, 
because the mobile terminal MTl is aware of the number of MAC 
frames during which it is in the sleep mode. 

Encryption in a communication system according to a preferred 
embodiment of the invention is presented in. . . 

...SPECIFICATION the lowermost layer, which takes care of using the radio 
channel in communication between the mobile terminal MTl and the 
access point API, such as encryption and channel allocation in the 
transmission and reception of packets. This description deals primarily 
with data frames FR of the MAC layer. It is obvious that encryption 
operations can also be performed in connection with the other protocol 



layers, but this is. 



.ST, the encryption sequence counter SC is preferably set to indicate the 
start of the encryption table ST. 

In the BCCH field of certain MAC frames, the access point API 
transmits information to all mobile terminals connected with the 
access point API in question (broadcast frame) or to some of them. . . 

.the mobile terminal MTl in question. In the sleep mode, the radio part 
of the mobile terminal MTl is set in a power saving mode or turned 
off. The encryption sequence counter SC can, however, be updated, 
because the mobile terminal MTl is aware of the number of MAC 
frames during which it is in the sleep mode. 

Encryption in a communication system according to a preferred 
embodiment of the invention is presented in. . . 
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English Abstract 

A secure wireless local or metropolitan area network (10) and data 



communications devices therefore are provided (lln), where the device 
(lln) transmits plain text in an encrypted message including cipher text 
and an initialization vector. The device may include a seed generator 

(20) for performing a one-way algorithm using a secret key, a device 
address, and a changing reference value for generating a seed. Further, a 
random initialization vector (IV) generator (21) may be included for 
generating a random IV, and a key encryptor (22) may generate a key 
sequence based upon the seed and the random IV. Additionally, a logic 
circuit (23) may be included for generating cipher text based upon the 
key sequence and plain text, and a wireless communications device (25) 
may be connected to the logic circuit (23) and the random IV generator 

(21) for wirelessly transmitting the encrypted message. 

French Abstract 

L' invention concerne un reseau local ou metropolitain sans fil securise 
(10) et leurs dispositifs de communications de donnees (lln) . Ces 
dispositifs (lln) transmettent des textes clairs dans un message crypte 
comprenant un cryptogramme et un vecteur d ' initialisation . Le dispositif 
pent comprendre un generateur de graines (20) servant a mettre en oeuvre 
un algorithme unilateral au moyen d'une cle secrete; une adresse du 
dispositif; et une valeur de reference variable pour generer une graine. 
Un generateur (21) de vecteur d ' initialisation aleatoire (IV) peut en 
outre etre Indus pour generer un vecteur d ' initialisation aleatoire; et 
un crypteur de cles (22) peut produire une sequence cle basee sur la 
graine et le vecteur d ' initialisation aleatoire. De plus, un circuit 
logique (23) peut etre inclus pour produire un cryptogramme base sur la 
sequence cle et le texte clair; et un dispositif de communications sans 
fil (25) peut etre connecte au circuit logique (23) et au generateur (21) 
de vecteur d ' initialisation aleatoire pour transmettre sans fil le 
message crypte. 
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event of the receipt of amendments , 
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Detailed Description 

Detailed Description 

further deterrent to many would be 
hackers . 

The 802.11 standard is for Use with wireless 
communications devices which have associated therewith a 
plurality of application control layers, one of which is the 

media access controller ( MAC ) layer. The MAC layer typically 
has a sequence number associated therewith which is updated 
with each encrypted message that is sent. In accordance with 
the invention, the changing reference value may conveniently 
be the MAC layer sequence number, although other changing 
reference values may be generated or used for creating... 
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Detailed Description 
Claims 

Fulltext Word Count: 15925 
English Abstract 

A method and system for simulating a wireless environment is provided 
including a central RF combining component (110); a plurality of 
connection nodes (102), each connection node (102) in RF connection with 
the central RF combining component (110) through a programmable 
attenuation component (108); wherein the programmable attenuation 
components (108) are controlled by a controller console, the controller 
console maintaining information regarding simulated spatial positioning 
of the plurality of connection nodes (102) in the simulated wireless 
environment, and adjusting the programmable attenuation components (108) 
to appropriately simulate the simulated spatial positioning of the 
connection nodes (102) in the simulated wireless environment. 
Additionally, an RF module (448) for creating and receiving RF signals in 
a test environment is provided. 

French Abstract 

L' invention concerne un precede et un systeme de simulation d'un 
environnement sans fil, comprenant une composante de combinaison RF 
centrale, plusieurs noeuds de connexion, chaque de noeud de connexion 
etant en connexion RF avec la composante de combinaison RF centrale a 
travers une composante d ' attenuation pouvant etre programmee. Les 



composantes d ' attenuation pouvant etre programmees sont commandees par 
une console d' unite de commande, cette console d' unite de cominande 
maintenant des informations concernant le positionnement spatial simule 
des noeuds de connexion dans 1 ' environnement sans fil simule, et reglant 
les composantes d * attenuation pouvant etre programmees afin de simuler de 
facon appropriee le positionnement spatial simule des noeuds de connexion 
dans 1 ' environnement sans fil simule. L' invention concerne egalement un 
module RF destine a creer et recevoir des signaux RF dans un 
environnement d'essai. 
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address, and implements the remaining functionality necessary to 
completely simulate a single IEEE 802.11 wireless client 104. This 
functionality may include, but is not limited to encryption and 
decryption , fragmentation and defiragmentation and functionality of 
interest normally associated with the IEEE 802.11 MAC sublayer 
Management Entities, such as Power Management, Timing and Synchronization 
Function, Authentication and Association management... 
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Claims 
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English Abstract 

The object of the invention is a method, network element, and system for 
positioning a subscriber terminal in a packet-switched mobile telephone 
network, the said network comprising a core network element (SGSN, 504), 
base stations, a Base Station Controller (501) controlling these, and a 
mobile terminal; the connections in the mobile telephone network are 
arranged in a packet-switched fashion. The system comprises a location 
unit (SMLC, 505) for determining the position of the terminal, 
functionally connected with the Base Station Controller (501) of the 
mobile telephone network; the connection between the Base Station 
Controller (501) and the location unit (SMLC) is circuit-switched. The 
base station controller (501) comprises both circuit-switched (BSC) and 
packet-switched (PCU) functionality for processing circuit-switched, and 
respectively, packet-switched messages, as well as means (506, 507) for 
establishing an association between the circuit-switched and the 
packet-switched functionality for the transmission of data related to a 
specific positioning between the packet-switched and the circuit-switched 
functionality. 

French Abstract 

L' invention concerne un precede, un element de reseau et un systeme 
permettant de localiser un terminal d'abonne dans un reseau telephonique 
mobile a commutation de paquets, ledit reseau comportant un element de 
reseau central (noeud de support GPRS de service (SGSN) , 504), des 
stations de base, un controleur de station de base (501) commandant 
lesdites stations, et un terminal mobile ; les connexions du reseau 
telephonique mobile sont disposees pour la commutation de paquets. Le 
systeme comporte une unite de localisation (centre serveur de 
localisation (SMLC), 505) afin de localiser un terminal, laquelle unite 
est f onctionnellement connectee au controleur de station de base (501) du 
reseau telephonique mobile ; La connexion entre le controleur de station 
de base (501) et 1' unite de localisation (SMLC) est a commutation de 
circuits. Le controleur de station de base (501) comprend une 
f onctionnalite a la fois de commutation de circuits (controleur de 
station de base) et de commutation de paquets (unite de commande de 
paquets) pour traiter des messages respectivement a commutation de 
circuits et a commutation de paquets, ainsi que des supports (506, 507) 
destines a associer les f onctionnalites de commutation de circuits et de 
commutation de paquets afin de transmettre des donnees relatives a une 
localisation specifique entre la f onctionnalite de commutation de paquet 
et la f onctionnalite de commutation de circuits. 
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Detailed Description 

Detailed Description 

. . . to minimise the effect of a modified air interface on the network 
component of the mobile telephone network. The information to be 
transmitted, as well as the user data, will be protected by encryption 
Between the Urn and Gb interfaces, the LLC data will be transmitted in 
the LLC relaying layer LLC RELAY. 

The MAC (Medium Access Control) layer is responsible for the following 
tasks . 



multiplexing of data and signalling. 

9 
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ABSTRACT EP 1439667 A2 

A roaming service method for a fast and secure wireless network is 
provided. In an embodiment of the present invention, an AP, which an STA 
associates with, transmits security keys needed for roaming to neighbor 
APs of the AP. When the STA moves to one of the neighbor APs, a 
reassociation is carried out between the STA and the neighbor AP using 
the already provided security key. In another embodiment of the present 
invention, an authentication server transmits security keys needed for 
roaming to neighbor APs to which the STA is likely to move, so that when 
the STA moves to one of the neighbor APs, a reassociation is carried out 
between the STA and the neighbor AP using the already provided security 
key . 

ABSTRACT WORD COUNT: 12 5 
NOTE: 

Figure number on first page: 8B 
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.SPECIFICATION standard regulates that data is encrypted by a WEP (Wired 
Equivalent Privacy) algorithm and the encryption key is shared 
preliminarily and used as fixed. For details, see "ISO/IEC, " Wireless 
LAN Mediiim Access Control ( MAC ) and Physical layer (PHY) 
specifications," ISO/IEC 8802-11, ANSI/IEEE Std 802.11, 1999". 

To correct wireless security flaws of the IEEE 802.11-based WLAN 
systems, IEEE 802.111 specifies IEEE... 
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ABSTRACT EP 1434391 A2 

A method of communicating between a transmitter and a receiver in a 
WLAN is disclosed. The transmitter has a Medium Access Control (MAC) 
layer. Data to be sent from the transmitter to the receiver is placed in 
a first data queue during a first period of time, and in a second data 
queue during a second period of time. Whilst the second queue is being 
filled from the MAC layer during the second time period, the data stored 
in the first queue is being filled from the MAC layer during the first 
time period, the data in the second queue is transmitted to the receiver. 
Thus there is provided an efficient co-ordination and transmission of 
- data frames from wireless devices, and a high performance flow of traffic 
between clients and APs . 

ABSTRACT WORD COUNT: 132 
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..SPECIFICATION MAC layer controls the co-ordination of frames having 
time-critical functions, while the upper MAC handles frames having 
non-critical time constraints. The upper MAC typically co-ordinates 
management frames including authentication, association and encryption 
and de- encryption frames. The lower MAC controls functionalities 
including frame transmission queues, where frames can be buffered before 
transmission until the wireless medium is free, and beacon frames. 
In the present embodiment of the invention, if data... 
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Adaptive adjustment of backoff times in wireless network communications 
Adaptive Anpassung von Backof f -Zeiten des Kommunikationen im drahtlosen 
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Reglage adaptatif des temps de backoff pour des communications dans un 
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ABSTRACT EP 14-2:4 814 "Al . 

A wireless network, including a plurality of network elements such as a 
wireless access point (9), and computer stations (2, 4, 6), is disclosed. 
The wireless network operates so that each network element (2, 4, 6, 9) 
waits for a pseudo-randomly selected duration, after the end of a frame 
on the channel, before initiating transmission. One of the network 
elements, such as the wireless access point (9), measures the performance 
of the network over a measurement period (T) , and adjusts a minimum value 
of the upper limit of the range from which the random duration is 
selected, according jto the performance of the network over the 
measurement period. The times measured may be the successful transmission 
time (Ts) ) )..,--which is maximized in adjusting the minimum value, or the 
idle and;:'eollision times (Ti)), Tc) ) ) , which are equated in the 
optimizat'ion of the minimum value. 
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.SPECIFICATION spectrum processor 40 according to the preferred 
embodiments of the invention. The functionality performed by MAC 38 and 
baseband processor 4 2 corresponds to that in conventional wireless 
network adapters, for example as implemented in the TNETWllOO single-chip 
WLAN medium"^ access controller. ( MAC ) noted above. In summary, MAC 

38 generates the appropriate packets for wireless communication, such 
packets^ including the acknowledge (ACK) , RTS, CTS, probe response, and 
beacon packets; ' MAC 38 also provides encryption and decryption 
functionality, and can be used to implement wired equivalent privacy 
(,WEP) . Baseband processor 42 performs... 
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English Abstract 

The invention provides a traffic shaper module allocates more bandwidth 
to real-time data in wireless TCP/IP networks where accessible bandwidth 
is limited. This is particular relevant for IEEE 802.11b networks. For 
downstream data, the traffic shaper module can be set to control the 
transmission to all clients and thereby give priority to the port 
carrying real-time data. For the upstream case, data transmission from 
all kinds of standard devices is to be reduced or delayed. Hence, the 
data transmissions from other clients have to be controlled remotely from 
the access point. By delaying or discarding packets, such as TCP 
acknowledgements, to other clients, the traffic shaper module 
artificially increases their Round Trip Time (RTT) . The protocol at these 
clients responds to the increased RTT by transmitting data at a lower 
rate, thereby leaving more bandwidth for the real-time data port. 

French Abstract 

invention concerne un module mise en forme de trafic attribuant plus de 
largeur de bande aux donnees en temps reel dans les reseaux hertziens 
TCP/IP ou la largeur de bande accessible est limitee. Les reseaux IEEE 
802.11b sont particulierement concernes . Pour des donnees descendantes , 
le module mise en forme de trafic peut etre regie pour commander 
1' emission vers tous les clients et pour accorder de ce fait la priorite 
au port portant des donnees en temps reel. Pour le cas de donnees 
montantes, 1' emission de donnees de toutes sortes de dispositifs standard 
doit etre reduite ou retardee. Par consequent, les emissions de donnees 
d'autres clients doivent etre commandees eloignees du point d'acces. En 
retardant ou en jetant des paquets, tels que des accuses de reception 
TCP, concernant d'autres clients, le module de mise en forme de trafic 
augmente artif iciellement leur temps de transmission aller-retour (RTT) . 
Le protocole concernant ces clients repond au RTT accru par emission des 
donnees a un debit inferieur, laissant de ce fait plus de largeur de 
bande pour le port de donnees en temps reel. 
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on the size of the upstream EP packets. Upstream packet sizes are 
known at the MAC layer and are made available by the wireless network 
driver . 

If the traffic is encrypted the sorting operation can be more 
complicated. If the Secure Socket Layer (SSL) mechanism is... 
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English Abstract 

A method is presented for synchronizing the counters in a mobile station 
MS and in a network element BSS of a mobile communication network, 
wherein the respective value of the counters is employed as a parameter 
for ciphering/deciphering data transmitted between the mobile station MS 
and the network element BSS. In order to enable such a synchronization, 
it is proposed that the method comprises transmitting the least 
significant bit HFN LSB of the current counter value in the mobile 
station MS or in the network element BSS to the respective other entity 
during an establishment of a temporary data connection between the two 
entities. Further, it is proposed that the method comprises synchronizing 
the counter at the respective other entity based at least on the 
transmitted least significant bit. A corresponding mobile station MS and 
a corresponding network element BSS are also presented , 

French Abstract 

La presente invention concerne un precede permettant de synchroniser les 
compteurs dans une station mobile (MS) et un element de reseau (BSS) d'un 
reseau de communication mobile dans lequel les valeurs respectives des 
differents compteurs sont employees comme parametre pour les donnees de 
chif f rement/dechif f rement echangees entre la station mobile (MS) et 
1 ' element de reseau (BSS). Pour permettre une telle synchronisation, il 
est propose de prendre le bit de poids le plus faible (HFN LSB) de la 
valeur courante du compteur de la station mobile (MS) ou de 1* element de 
reseau (BSS) et de le transmettre a 1' autre entite correspondante pendant 
1 ' etablissement d'une connexion numerique temporaire entre les deux 
entites . II est propose egalement, pour synchroniser le compteur de 
1' autre entite correspondante, de se baser sur au moins le bit de poids 
le plus faible transmis. L' invention concerne egalement une station 



mobile (MS) et un element de reseau (BSS) selon 1' invention. 
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synchronization of the HFN 
counters, the subsequent uplink RLC data blocks can be 
ciphered and deciphered correctly. 

When a mobile station is in the MAC -Idle state, a packet 
access can be achieved either in one phase or in two... 
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English Abstract 



A novel Medium Access Control (MAC) architecture for IEEE 802.11 wireless 
local area networks is disclosed. The illustrative embodiment partitions 
the medium access control into an Upper Medium Access Control for 
providing medium-access-control services that are independent of a 
Physical Control, and a Lower Medium Access Control for providing 
medium-access-control services that are dependent on the Physical 
Control. By partitioning the Medium Access Control in this manner, a 
single Upper Medium Access Control can be employed for any existing or 
future Physical Control while maintaining full compatibility with the 
huge installed base of existing IEEE 802.11 equipment. It will be clear 
to those skilled in the art how to make and use alternative embodiments 
of the present invention for networks that employ protocols other than 
IEEE 802.11. 



French Abstract 

invention concerne une architecture de commande d'acces au support 
cloisonnee pour reseaux de zone locale sans fil IEEE 802.11. Le mode de 
realisation illustrateur separe la commande dracoes au support en une 
commande d'acces au support superieure permettant de fournir des services 
de commande d'acces au support qui sont independants d'une commande 
physique, et en une commande d'acces au support inferieure permettant de 
fournir des services de commande d'acces au support qui sont dependants 
de la commande physique. Un tel cloisonnement de la commande d'acces au 
support permet 1 ' utilisation d'une seule commande d'acces au support 
superieure pour toute commande physique existante ou future, tandis 
qu'est maintenue une compatibilite complete avec 1 ' importante base 
installee de 1 ' equipement existant IEEE 802.11. Ceci paraitra evident aux 
experts aptes a realiser et a utiliser des autres modes de realisation de 
cette invention pour les reseaux qui utilisent des protocoles autres que 
IEEE 802.11. 
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... well-known in the art. 



[0021] Figure 3 depicts a conceptual architectural diagram of a wireless 
station in accordance with the illustrative embodiment of the present 
invention. As shown in Figure 3,. Medium Access Control 220 is 
partitioned into Upper Medium Access Control 310 and Lower Medium Access 
Control 320. Upper Medium Access Control 310 provides a subset of 
medium - access - control services that are independent of Physical 
Control 2 30, including transmit queueing, encryption , decryption , 
authentication, association, reassociation, scanning, distribution, and 
traffic categorization (for the purposes of, for example but... 
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English Abstract 

A MAC architecture (Fig 2, 24) for WLAN (Figl, 14) stations (Fig 1, 16) 
partitions functionality between a software-based MAC component (Fig3, 
24A) and a hardware-based MAC component {Fig3, 24B) that work together to 
balance function and performance (Fig 8) . In general, the fulcrum for 
this balance centers on timing requirements (Fig 12) . Accordingly, the 
hardware-based MAC component is designed to handle many of the functions 
that are processor-intensive and/or must be performed under strict timing 
constraints (Fig 6). The software-based MAC component is designed to 
handle many of the functions that are memory-intensive, but present more 
lenient timing requirements (Fig 7). The so,f tware-based MAC component may 
be configured to provide an efficient and robust interface to the 
hardware-based MAC component (Fig 5, 25) . In particular, the 
software-based MAC component may format and prioritize packets to be^ sent 
over the air interface (Fig 9) , and generate a command structure that 
provides instructions for the hardware-based MAC component to process the 
packet (Fig 10) . 

French Abstract 

L' invention concerne une architecture de commande d'acces au support 
(MAC) (fig. 2, 24) destinee aux stations d*un reseau local sans fil 
(WLAN) (fig. 1, 14). Dans cette architecture, la f onctionnalite est 
divisee entre un composant MAC logiciel (fig. 3, 24A) et un composant MAC 
materiel (fig. 3, 24B) qui cooperent de maniere a equilibrer fonction et 
performance (Fig. 8). En general le parametre determinant pour cet 



equilibre est centre sur les contraintes de synchronisation (Fig. 12). Le 
composant MAC materiel est par consequent concu pour gerer un grand 
nombre des fonctions qui sont gourmandes en temps de processeur et/ou 
doivent etres executees en respectant des contraintes de synchronisation 
strictes (Fig. 6) . Le composant MAC logiciel est configure pour gerer un 
grand nombre des fonctions qui sont voraces en memoire, mais presentent 
des contraintes de synchronisation moins rigides (Fig. 6). Le composant 
MAC logiciel peut configure de maniere a fournir une interface efficace 
et robuste avec le composant MAC materiel (Fig. 5, 25) . II peut en 
particulier formater et classer par ordre de priorite les paquets devant 
etre envoyes par I'interface radio (Fig. 9), et generer une structure de 
commande qui genere des instructions concernant le traitement des 
paquets, destinees au composant MAC materiel (Fig. 10) . 
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... of the functions that are traditionally performed at higher layers of 
communication stacks in the MAC layer. For example, the IEEE 802.11 
standards require that the MAC layer be responsible for scanning, 
authentication, association, encryption , fragmentation, and power 
management. Hence, a MAC layer designed for wireless networking may 
require delivery of high-level f imctionality in combination with 
low-level responsiveness. Such. . . 



30/5, K/12 (Item 12 from file: 349) 

DIALOG (R) File 34 9:PCT FULLTEXT 

(c) 2004 WIPO/Univentio. All rts. reserv. 

01009026 *^Image available^* 

WIRELESS LANS AND NEIGHBORHOOD CAPTURE 

RESEAUX LOCAUX SANS FIL ET CAPTURE DE VOISINAGE 

Patent Applicant /Assignee : 

AT & T CORP, 32 Avenue of the Americas, New York, NY 10013-2412, US, US 
(Residence) , US (Nationality) 
Inventor ( s ) : 

BENVENISTE Mathilde, 76 Harding Drive, South Orange, NJ 07079, US, 
Legal Representative: 

SZWERC Christine M (et al) (agent), AT & T Corp., P.O. Box 4110, 
Middletown, NJ 07748-4110, US, 
Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200339054 A2-A3 20030508 (WO 0339054) 

Application: WO 2002US36425 20021028 (PCT/WO US02036425) 

Priority Application: US 2001330930 20011102; US 2001985257 20011102; US 
2001331030 20011107; US 2001331211 20011113; US 2001342343 20011221; US 
2002187132 20020628; US 2002256299 20020927; US 2002256309 20020927; US 
2002256305 20020927; US 2002256516 20020927; US 2002256471 20020927; US 
2002256384 20020927 
Designated States: 

(Protection type is "patent" unless otherwise stated ~ for applications 
prior to 2004) 

AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ 



EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR 
LS LT LU LV MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SD SE SG SI 
SK SL TJ TM TN TR TT TZ UA UG UZ VN YU ZA ZM ZW 

(EP) AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LU MC NL PT SE SK TR 

(OA) BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW 

(EA) AM AZ BY KG KZ MD RU TJ TM 
Main International Patent Class: H04Q-007/24 
International Patent Class: H04L-012/4 13 ; H04J-003/06 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 
Detailed Description 
Claims 

Fulltext Word Count: 10416 
English Abstract 

Overlapped wireless LAN cells in a medium have an equal chance at 
establishing a session on the medium. A first member station in the first 
cell transmits a timing packet containing a timestamp value, which is 
received at a second member station in the second cell. This synchronizes 
member stations in the first and second ells to interrupt transmissions 
at a global channel release instant corresponding to the timestamp value. 
The member stations in the first and second cells then have the 
opportunity to content for accessf to the medium following the global 
channel release . instant , using a slotted CSMA/CA access method. Each of 
the member station in the first and second cells has a superframe clock 
that is synchronized based on the timestamp value, thereby establishing a 
periodic global channel relase instant during each of a plurality of 
periodic superframes. The member stations can then periodically interrupt 
transmissions at the periodic global channel release instant to content 
for the medium. The periodic global channel release instant occurs at 
intervals that are sufficiently close to meet delay and jitter 
restrictions for time-critical voice and video applications. 

French Abstract 

L* invention concerne des cellules de reseaux locaux, LAN, sans fil se 
chevauchant dans un support, qui ont une chance egale d'etablir une 
session sur le support. Une premiere station membre dans la premiere 
cellule emet un paquet de synchronisation contenant une valeur 
d ' horodateur, qui est recu par une seconde station membre dans la seconde 
cellule. Les stations membres sont ainsi synchronisees dans les premiere 
et seconde cellules pour interrompre des emissions a un instant de 
liberation de canal global correspondant a la valeur d ' horodateur . Les 
stations membres dans les premiere et seconde cellules ont alors la 
possibilite de se disputer I'acces au support a la suite de 1' instant de 
liberation de canal global par un procede d'acces CSMA/CA a fentes. 
Chacune des stations membres dans la premiere et dans la seconde stations 
membres a une horloge a supertrame synchronisee sur la base de la valeur 
d ' horodateur . Un instant de liberation de canal global periodique peut 
ainsi etre etabli pendant chacune des nombreuses supertrames periodiques. 
Les stations membres peuvent done interrompre periodiquement des 
emissions a 1' instant de liberation de canal global periodique pour 
rivaliser pour le support. Ledit instant survient a des intervalles qui 
sont suffisamment rapproches pour repondre aux restrictions en matiere de 
retard et de guigue pour des applications vocales et video a duree 
critique . 
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using the 

25 Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) 
access method. The MAC provides link setup, data fragmentation, 
authentication, encryption , and power management. 

Synchronization is the process of the stations in an 

IEEE 802.11 wireless LAN cell getting in step with each other, so that 
reliable communication is possible. The MAC provides the 
synchronization mechanism to allow support of physical layers that 
make use of frequency. . . 
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English Abstract 

A polling method, apparatus, and system capable to detect the attachment 
and detachment of Universal Serial Bus (USB) devices in a wireless USB 
system. A USB hub provides a wired connection to the host, while 
providing wireless attachment points for its devices. The USB host 
periodically queries the hub looking for changes in the hub's status 
register. During each period, the hub sends a polling message through 
each of its wireless ports, and awaits a response. A peripheral device 
that wishes to attach to the system responds to the message by sending 
its unique peripheral address. If a device currently occupies the port, 
the hub sends out the device's unique assigned address as part of the 
polling message. If the device is still present, it responds by sending 
its unique peripheral address. If the host does not receive a response 
after multiple retries, the device is considered detached. The hub thus 
determines the status of the ports and updates the appropriate bits in 
the status register, which is the queried by the host. 

French Abstract 

La presente invention concerne un precede, un appareil et un systeme de 
regroupement capables de detecter le raccordement et la fin de 
raccordement de dispositifs bus seriel universel (USB) dans un systeme 
USB sans fil. Un central USB fournit une connexion filaire a I'hote et 
des points de raccordement pour ses dispositifs. L'hote USB questionne 
periodiquement le central recherchant des modifications dans le registre 
d'etats du central. Pendant chaque periode, le central envoie un message 
de regroupement via chacun de ses ports, et attend une reponse. Un 
dispositif peripherique qui souhaite se raccorder au systeme repond a ce 
message en envoyant son adresse de peripherique unique. Si un dispositif 
occupe actuellement le port, le central envoie 1' adresse attribuee unique 
de ce dispositif sous forme de partie du message de regroupement. Si le 
dispositif est toujours present, il repond en envoyant son adresse 
peripherique unique. Si I'hote ne recoit pas de reponse apres de 
multiples nouvelles tentatives, le dispositif est considere comme non 
raccorde. Le central determine ainsi I'etat des ports et met a jour les 
bits appropries dans le registre d'etats, lequel est ensuite demande par 
1 'hote. 
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is any structure that provides the procedures involved in transferring 
a single bit over the wireless medium being used by the wireless 
module I 10. 

FIG. 3 is a block diagram of a media access control layer 104, 
constructed and operative in accordance with an embodiment of the present 
invention. In this 



5 

embodiment, media access control layer 104 comprises a protocol 
management interface 3 00 and a key management and enczryption unit 
(KMEU) 3 10. 

Protocol management interface 300 is the structure that enables media 
access control layer 104 to communicate using a particular wireless 
communications protocol, as described above. For example, in a wireless 
Universal Serial Bus (wireless USB) embodiment, protocol management 
interface 300 processes messages from device interface... 
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English Abstract 

A mobile terminal (200) is connected via a wireless interface to 
(210) of a visited network (220) which is connected to a visited 
(230) connected toa home gateway (240). A subscriber 



an agent 
gateway 



database/authentication center (260) is disposed within the home network 
(250) . It is assumed that there is a pre-established security asociation 
between the visited GW (230) , which can be the visited AAA server, and 
the agent (210) . This Security Association may, for example, be set up 
offline throufh manual key entry, Internet Key Exchange Protocol or Key 
Distribution Server specific to the Visited Network (220) . This provides 
security internally to the network so that the operator can choose the 
level and type of security to be implemented in its network. There is 
another pre-selected Security Association between Subscriber 
databse/Authentication Center (260) and the Home GW (240). This security 
Association may be established in the same fashion as that noted above 
and also serves to provide security internally to the network. There is 
still another pre-established Security association between the Home GW 
(240) and the Visited GW (230) . 

French Abstract 

Selon 1* invention, une technique de negociation d ' etablissement d'une 
association de securite consiste a transmettre a un premier element de 
reseau des informations d ' identification d'un noeud mobile, par 
1 ' intermediaire d'une premiere interface. Des negociations sont alors 
entamees entre le premier element de reseau et un second element de 
reseau servant de mandataire pour le noeud mobile, par 1 ' intermediaire 
d'une seconde interface. Ces negociations permettent d'etablir une 
association de securite entre un noeud mobile et un premier element de 
reseau, le second element de reseau utilisant anterieurement les 
parametres de 1 ' association de securite stockes du noeud mobile. Suite a 
un accord entre le premier element de reseau et le second element de 
reseau par rapport aux parametres de 1 ' association de securite, le 
premier element de reseau transmet les parametres de 1 ' association de 
securite convenus, au noeud mobile, par 1 ' intermediaire de la premiere 
interface. Le premier element de reseau pent comprendre un agent 
d'origine, un noeud correspondant ou un agent, et la premiere interface 
pent inclure une interface sans fil permettant d'envoyer des informations 
entre le noeud mobile et le premier element de reseau. Le premier element 
de reseau peut comprendre egalement une premiere passerelle connectee 
audit element. La premiere passerelle peut comprendre egalement un 
serveur AAA ( authentif icat ion, autorisation, et comptabilite) . Le second 
element de reseau peut comprendre une seconde passerelle et un centre 
d * authentif ication/base de donnees d*un abonne, et la seconde passerelle 
peut etre connectee au centre d ' authentif icat ion/base de donnee d'un 
abonne. La seconde passerelle peut comprendre egalement un serveur AAA. 
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ciphering key CK. That is, Fl (Kil 
RANDl) - K and F2 (Ki, RAND2 ) = CK. The Mobile Node 200 sends its 



identity through its NAI, for example, to the Agent 210 with the RANDl 
and a 

MAC for integrity protection using the IK, The Mobile Node 200 may 
also 
9 

protect part of the message using CK encrypt it. 

Since the message is a request for a Security Association to be set up. . 
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English Abstract 

When a new wireless device (100) arrives within the communication range 
of any member (106 or 108) of the ad hoc network, its inquiry signals ar 
answered by the first member detecting the inquiry. If that first member 
is an ad hoc network information provider (106), it responds with 
information accessed from its service registry characterizing the ad hoc 
network. If, instead, an ordinary device (108) in the ad hoc network is 
the first to respond to the inquiry signals of the arriving device, the 



device responds with the address of the ad hoc network information 
provider (106) . The arriving device (100) then pages the ad hoc network 
information provider (106) to obtain information characterizing the ad 
hoc network. 

French Abstract 

Lorsqu'un dispositif sans fil (100) arrive dans la plage de communication 
d'un element quelconque (106, 108) d'un reseau ad hoc, le premier element 
detectant une demande repond aux signaux de demande provenant dudit 
dispositif. Lorsque ce premier element est un fournisseur d ' informations 
(106) du reseau ad hoc, il repond a I'aide d ' informations auxquelles on 
accede a partir d^un registre de services caracterisant ledit reseau ad 
hoc. Au contraire, lorsqu'un dispositif ordinaire (108) du reseau ad hoc 
est le premier a repondre aux signaux de demande du dispositif arrivant, 
ledit dispositif repond a 1 ' aide de I'adresse du fournisseur 
d' informations (106) du reseau ad hoc. Puis, le dispositif arrivant (100) 
recherche ledit fournisseur d ' informations (106) du reseau ad hoc afin 
d'obtenir des informations caracterisant ledit reseau ad hoc. 
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also provides service inquiring which is similar to the Bluetooth 
inquiry and scan operation. The MAC , provides link setup, data 
fragmentation, authentication, encryption , power management. 

The IEEE 802.11 wireless LAN architecture is built around a basic 
service set (ESS) of stations that communicate with. . . 
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English Abstract 

A transmitter (7102) includes a balanced modulator/up-converter (7104), a 
control signal generator (7142), an optional filter (7106) and an 
optional amplifier (7108). Transmitter (7102) up-converts a baseband 
signal (7110) to produce an output signal (7140) that is conditioned for 
wireless or wire line transmission. In doing so, the balanced modulator 
(7104) receives the baseband signal (7110) and samples the baseband 
signal in a differential and balanced fashion according to the first and 
second control signals that are phase shifted with respect to each other 
and so generated a harmonically rich signal (7138) . The resulting 
harmonically rich signal (7138) includes multiple harmonic images that 
repeat at harmonics of the sampling frequency information to reconstruct 
the baseband signal. 

French Abstract 

Un emetteur (7102) comprend un modulateur /transposeur de frequence (7104) 
symetrique, un generateur (7142) de signaux de commande, un filtre (7106) 
optionnel et un amplif icateur (7108) optionnel. L' emetteur (7102) 
convertit la frequence d ' un signal (7110) de bande de base pour produire 
un signal de sortie (7140) conditionne pour effectuer une transmission 
sans fil ou sur ligne metallique. Ainsi, le modulateur (7104) symetrique 
recoit le signal (7110) de bande de base et echantillonne le signal de 
bande de base de maniere dif f erentielle et symetrique en fonction des 
premier et deuxieme signaux de commande dephases 1 ' un par rapport a 
1^ autre, creant ainsi un signal (7138) a richesse harmonique. Le signal 
(7138) a richesse harmonique obtenu comprend des images harmoniques se 
repetant dans les harmoniques des donnees de frequence d ' echantillonnage 
pour reformer le signal de bande de base. 
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... near isochronous service to the stations on the polling list. 

The third function of the MAC is to protect the data that it delivers. 



Because it is difficult to contain 
particular physical area, the MAC 



wireless WLAN signals to a 
provides a privacy service, called 
Wired Equivalent Privacy (WEP) , which encrypts the data sent over the 
wireless medium. The level of encryption chosen approximates the level 
of protection data might have on. . . 
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English Abstract 

A method for modifying operation of a transmission control protocol (TCP) 
sliding window algorithm in a wireless point to multi-point (PtMP) 
transmission system. The method includes ensuring that transport of a 
packet over a wireless telecommunications link is occurring reliably; and 
modifying operation of a TCP sliding window algorithm if transport is not 
occurring reliably in order to control a TCP transmission rate. The 
ensuring step includes awaiting acknowledgement of wireless transmission 
of the packet at a link layer over the wireless link; and retransmitting 
at the link layer a lost one of the packets. The link layer can be a 
packet-centric QoS aware media access control (MAC) layer. The modifying 
step includes suppressing transmission of a TCP layer communication that 
would cause the TCP sliding window algorithm to modify the TCP 
transmission rate. The suppressing step can include preventing a source 
TCP from retransmitting the packet. The suppressing step can include 
avoiding modification of a source TCP layer and a destination TCP layer. 
The source and destination TCP layers can be unaware of operation 
modification. The suppressing can include intercepting retransmission 
requests between a destination TCP layer of a subscriber workstation 
coupled to a subscriber CPE station which is in wireless communication 
with a wireless base station, and a source TCP layer of a host 
workstation coupled to the wireless base station. The method can include 
detecting real congestion and permitting transmission of a TCP layer 
communication that would cause the TCP sliding window algorithm to modify 
the TCP transmission rate if real congestion is detected. Here, the 
detecting step can include determining from the link layer whether the 
wireless transmission of the packet was acknowledged. 

French Abstract 

L' invention concerne un precede visant a modifier le f onctionnement d ' un 
algorithme a fenetre glissante d'un protocole TCP dans un systeme de 
transmission point a multipoint (PtMP) radio. Le procede consiste a 
s' assurer que le transport. d*un paquet sur un relais de telecommunication 
s'effectue de maniere fiable, et a modifier le f onctionnement d'un 
algorithme a fenetre glissante TCP si le transport ne s'effectue pas de 
maniere fiable afin de commander la vitesse de transmission TCP. Cette 
etape comprend I'attente de 1' accuse de reception de la transmission 
radio du paquet a une couche de liaison sur la liaison radio, et la 
retransmission a la couche de liaison d'un paquet perdu. La couche de 
liaison peut etre une couche de commando d'acces au support (MAC) de 
qualite de service paquet-centrique . L' etape de modification comprend la 
suppression de la transmission d'une communication de la couche TCP 
pouvant provoquer la modification de la vitesse de transmission TCP par 
I'algorithme a fenetre glissante TCP. L'etape de suppression consiste a 
empecher un TCP source de retransmettre le paquet, et a eviter la 
modification d'un TCP source et d'une couche TCP cible. Les couches TCP 
source et cible peuvent ne pas etre informees de la modification de 
f onctionnement . La suppression peut comprendre 1 ' interception des 
demandes de retransmission entre une couche TCP cible de la station de 
travail d'un abonne couplee a une station CPE d'abonne en communication 
radio avec une station de base radio, et une couche TCP source d'une 
station de travail hote couplee a une station de base radio. Le procede 
consiste a detecter un encombrement reel et a permettre la transmission 
d'une communication de la couche TCP pouvant provoquer la modification de 
la vitesse de transmission TCP par 1' algorithme a fenetre glissante TCP 
si un encombrement reel est detecte. L'etape de detection consiste a 
determiner a partir de la couche de liaison si la transmission radio du 



paquet fait I'objet d'un accuse de reception. 
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gateway 1706e and firewall to IP network layer 1708e and 1708d and 
then down through encryption layer 1706d, io PRIMMA MAC layer 1704d 
and down to wireless link to subscriber CPE 294d. 



Subscriber CPE 294d flows packet IP flows up from antenna 292d at 
physical wireless layer 1702c up through MAC layer 1704c, through 
encryption layer 1706c, through IP layers 1708 b and 1708c, then down 
through optional layer 1706b ... satellite link, to antenna 290d of 
wireless base station 302 at wireless physical layer 1802d. 

Wireless base station 302 flows packet IP flows up from antenna 290d at 
physical wireless layer 1802d up through MAC layer 1804d, through 
IPsec layers 1806d and 1806d, !5 which can encapsulate packets and 
encrypt .them. From IPsec layer 1806e, IP flows can flow - 14 6 down 
through WAN layer 1804'e... 
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Fulltext Word Count: 4 6658 
English Abstract 

A time domain multiple access/time division duplex (TDMA/TDD) media 
access control (MAC) telecommunications access method which includes the 
steps of accessing one or more dynamically allocatable control packets 
for providing control information over a wireless medium between a 
wireless base station and one or more subscriber customer premises 
equipment (CPE) stations, and accessing one or more dynamically 
allocatable data packets for providing data information over a wireless 
medium between a wireless base station and one or more subscriber 
customer premises equipment (CPE) stations is disclosed. An aspect of the 
invention includes the steps of communicating a downstream 
acknowledgment, communicating a reservation request, communicating 
operations data, communicating an upstream acknowledgment slot, 
communicating an acknowledgment request slot, communicating a frame 
descriptor slot, and communicating a command and control slot. 

French Abstract 

Un precede d'acces aux telecommunications a commande d'acces au support 
(MAC) a acces multiple par repartition dans le temps/duplex a repartition 
dans le temps (AMRT/DRT) comprend les etapes consistant a acceder a un ou 
a plusieurs paquets de commande affectables dynamiquement destines a 
fournir des informations de commande par un support sans fil entre une 
station de base sans fil et une ou plusieurs stations d'equipement prive 
d'abonnes (EPA), et a acceder a un ou a plusieurs paquets de donnees 
affectables dynamiquement destines a fournir des informations sur les 
donnees par un support sans fil entre une station de base sans fil et une 
ou plusieurs stations d'equipement prive d'abonnes (EPA). Un aspect de 
1 ' invention comprend les etapes de communication d*un accuse de reception 
aval, de communication d'une demande de reservation, de communication de 
donnees operat ionnelles , de communication d'un intervalle d' accuse de 
reception amont, de communication d^un intervalle de demande d' accuse de 
reception, de communication d'un intervalle de descripteur de trame et de 
communication d'un intervalle d ' instruction et de commande. 
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gateway 1706e and firewall to IP network layer 1708e and 1708d and 

then down through encryption layer 1706d, PRIMMA MAC layer 1704d and 

down to wireless link to subscriber CPE 294d. 

Subscriber CPE 294d flows packet IP flows up from antenna 292d at 
physical wireless layer 1702c up through MAC layer 1704c, through 
encryption layer 1706c, through IP layers 1708 b and 1708c, then down 
through optional layer 1706b. . . 

...satellite link, to antenna 290d of wireless base station 302 at wireless 
physical layer 1802d. 

Wireless base station 302 flows packet IP flows up from antenna 290d at 
physical - 147 wireless layer 1802d up through MAC layer 1804d, 
through IPsec layers 1806d and 1806d, which can encapsulate packets and 
encrypt them. From iPsec layer 1806e, IP flows can flow down through WAN 
layer 1804e and. . . 
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Claims 

Fulltext Word Count: 48784 
English Abstract 

A packet centric wireless point-to-multipoint (PtMP) telecommunications 
system is provided. The telecommunications system includes a wireless 
network that provides for true QoS . A media access control (MAC) layer is 
used in a packet-centric wireless point to multi-point (PtMP) 
telecommunications system, the telecommunication system includes a 
wireless base station coupled to a first data network, one or more host 
workstations coupled to the first data network, one or more subscriber 
customer premise equipment (CPE) stations in wireless communication with 
the wireless base station over a shared bandwidth using a packet-centric 
protocol, and one or more subscriber workstations coupled to each of the 
subscriber CPE stations over a second network. The MAC layer includes a 
resource allocation means that allocates shared bandwidth among the 
subscriber CPE stations to optimize end-user quality of service (QoS) . 

French Abstract 

L' invention concerne un systeme de telecommunications paquet-centrique 
point-a-multipoint sans fil. Le systeme de telecommunications comporte un 
reseau sans fil qui fournit une veritable qualite de service (QS) . 
L' invention concerne egalement une couche de controle d'acces au support 
(MAC), utilisee dans ledit systeme. Ce dernier comporte une station de 
base sans fil couplee a un premier reseau de donnees, une ou plusieurs 
stations de travail hotes couples a ce premier reseau de donnees, une ou 
plusieurs stations d ' installations d'abonnes (CPE) en communication sans 
fil avec la station de base sans fil sur une largeur de bande partagee, 
au moyen d'un protocole paquet-centrique, et une ou plusieurs stations de 
travail abonne couplees a chacune des stations CPE par un second reseau. 
La couche MAC comporte un dispositif deallocation de ressources qui 
repartit la largeur de bande partagee entre les stations CPE abonne afin 
d'optimiser la qualite de service de 1 ' ut ilisateur final (QoS). 
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gateway 1706e and firewall to IP network layer 1708e and 1708d and 
then down through encryption layer 1706d, PRIMMA MAC layer 1704d and 
down to wireless link to subscriber CPE 294d. 



Subscriber CPE 294d flows packet IP flows up from antenna 292d at 



physical wireless layer 1702c up through MAC layer 1704c. through 
encryption layer 1706c, through IP layers 1708 b and 1708c, then down 
through optional layer 1706b. . . 

.satellite link, to antenna 290d of wireless base station 302 at wireless 
physical layer 1802d. 

Wireless base station 302 flows packet IP flows up from antenna 290d at 
physical - 149 wireless layer 1802d up through MAC layer 1804d, 
through IPsec layers 1806d and 1806d, which can encapsulate packets and 
encrypt them. From IPsec laver 1806e, IP flows can flow down through WAN 
layer 1804e and. . . 
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Detailed Description 

Claims 

Fulltext Word Count: 59235 



English Abstract 

A packet-centric wireless point to multi-point telecommunications system 
includes: a wireless base station communicating via a packet-centric 
protocol to a first data network; one or more host workstations 
communicating via the packet-centric protocol to the first data networks- 
one or more subscriber customer premise equipment (CPE) stations coupled 
with the wireless base station over a shared bandwidth via the 
packet-centric protocol over a wireless medium; and one or more 
subscriber workstations coupled via the packet-centric protocol to each 
of the subscriber CPE stations over a second network. The packet-centric 
protocol can be transmission control protocol/internet protocol (TCP/IP) . 
The packet-centric protocol can be a user datagram protocol/internet 
protocol (UDP/IP) . The system can include a resource allocation means for 
allocating shared bandwidth among the subscriber CPE stations. The 
resource allocation is performed to optimize end-user quality of service 
(QoS) . 

French Abstract 

L' invention concerne un systeme de telecommunication point a multipoint 
sans fil a base de paquets comprenant une station de base sans fil 
communiquant par 1 ' intermediaire d ' un protocole a base de paquets avec un 
premier reseau de donnees, une ou plusieurs stations de travail hotes 
communiquant par 1 ' intermediaire de ce protocole a base de paquets avec 
le premier reseau de donnees, une ou plusieurs stations d'equipement 
prive d'abonne (EPA) connectees a la station de base sans fil sur une 
largeur de bande partagee par 1 ' intermediaire du protocole a base de 
paquets sur un support sans fil, et une ou plusieurs stations de travail 
d'abonne connectees a chacune des stations EPA sur un second reseau par 
1 ' intermediaire du protocole a base de paquets. Le protocole a base de 
paquets pent etre un protocole de controle de transmission (TCP) ou un 
protocole Internet (IP) . Le protocole a base de paquets peut etre un 
protocole de datagramme utilisateur (UDP) ou un protocole Internet (IP) . 
Le systeme peut comprendre un dispositif d ' affectation de ressources 
destine a repartir une largeur de bande partagee entre les stations EPA. 
L ' affectation de ressources sort a optimaliser la qualite de service pour 
un utilisateur final. 
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gateway 1706e and firewall to IP network layer 1708e and 1708d and 
then down through encryption layer 1706d, PRIMMA MAC layer 1704d and 
down to wireless link to subscriber CPE 294d. 



Subscriber CPE 294d flows packet IP flows up from antenna 292d at 
physical wireless layer 1702c up through MAC layer 1704c, through 
encryption layer 1706c, through IP layers 1708 b and 1708c, then down 
through optional layer 1706b ... satellite link, to antenna 290d of 
wireless base station 302 at wireless physical layer 1802d. 



Wireless base station 302 flows packet IP flows up from antenna 290d at 
physical wireless layer 1802d up through MAC layer 1804d, through 
IPsec layers 1806d and 1806d, which can encapsulate packets and encrypt 



them. From IPsec layer 1806e, IP flows can flow 165 down through WAN 
layer 1804e . . . 
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English Abstract 

A method and apparatus for a data transmission rate of multiples of 100 
mega-bits per second (Mbps) in a terminal for a wireless metropolitan 
area network. A terminal includes a first media access control unit (MAC) 
unit for receiving Fast Ethernet data packets at a rate of 100 Mbps for 
communication over a wireless link, n-1 additional MAC units for 
receiving Fast Ethernet data packets at a rate of 100 Mbps for 
communication over the wireless link, a multiplexer having n inputs, 
wherein each input is coupled to receive the data packets from a 
corresponding one of the MAC units and wherein the output of the 
multiplexer provides time-division multiplexed data, a packet formatting 
apparatus coupled to the output of the multiplexer for formatting the 
time division multiplexed data according to radio frames, and a wireless 
transceiver coupled to the packet formatting apparatus for communicating 
the radio frames over a wireless link wherein the wireless link has a 
maximum bandwidth capacity of at least n times 100 Mbps. Each MAC unit 
can include a rate control unit and a rate buffer for temporarily storing 
data packets received by the corresponding MAC unit prior to providing 
them to a corresponding one of the inputs of the multiplexer. Each MAC 
unit can include a corresponding layer-two or layer-three switch having a 
100 Mbps port. The maximum transmission rate is limited only by the 
bandwidth of the wireless link. 

French Abstract 

L' invention concerne un precede et un appareil permettant d'obtenir une 
Vitesse de transmission de donnees de 1 ' ordre de multiples de 100 mb/s 
dans un terminal pour un reseau metropolitain sans fil. Un terminal 



comporte une premiere unite de commande d'acces au support (MAC) pour 
recevoir des paquets de donnees Ethernet Rapide a une vitesse de 100 Mb/s 
pour communiquer via une liaison sans fil. Ce terminal comporte egalement 
n-1 unites MAC supplementaires pour recevoir des paquets de donnees 
Ethernet Rapide a une vitesse de 100 Mb/s pour communiquer via ladite 
liaison sans fil. Ce terminal comporte egalement un multiplexeur pourvu 
de n entrees, chaque entree etant couplee pour recevoir les paquets de 
donnees d'une unite MAC correspondante et la sortie du multiplexeur 
fournissant des donnees mulitplexees dans le temps. Ce terminal comporte 
egalement un appareil de formatage de paquets couple a la sortie du 
multiplexeur pour formater les donnees mulitplexees dans le temps en 
fonction de trames radio. Ce terminal comporte enfin un 

eraetteur-recepteur sans fil couple a 1 ' appareil • de formatage de paquets 
pour transmettre les trames radio via une liaison sans fil, celle-ci 
ayant une capacite maximale de largeur de bande d'au moins n fois 100 
Mb/s. Chaque unite MAC peut comporter une unite de commande de vitesse et 
un tampon de vitesse pour memoriser provisoirement des paquets de donnees 
recus par 1 ' unite MAC correspondante avant de fournir ces paquets' de 
donnees a une sortie correspondante du multiplexeur. Chaque unite MAC 
peut comporter un commutateur couche-deux ou couche-trois correspondant 
qui comporte un port 100 Mb/s. La vitesse de transmission maximale n'est 
limitee que par la largeur de bande de la liaison sans fil. 

Fulltext Availability: 
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Detailed Description 

. . . provided to the second input of the multiplexer from the second rate 
buffers . The first MAC unit can include a first data encryption 
apparatus coupled to the first data packet switch. The second MAC unit 
can include a second data encryption apparatus coupled to the second 
data packet switch. 

According to yet another aspect of the present invention, a terminal for 
a wireless link in a metropolitan area includes a first MAC unit for 
receiving Fast Ethernet data packets at a rate of 100 Mbps for 
communication over a wireless link, n-1 additional MAC units for 
receiving Fast Ethernet data packets at a rate of 100 Mbps for 
communication over the wireless link, a multiplexer having n inputs, 
wherein each input is coupled to receive the data. 
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English Abstract 

Method and apparatus for an Ethernet switch in a terminal for a wireless 
metropolitan area network. In accordance with an aspect of the invention, 
a terminal for a wireless link in a metropolitan area network includes a 
network switch having a first port for receiving the data packets from a 
computer network and a second port for forwarding the data packets; rate 
buffers coupled to the network switch for receiving the data packets from 
the second port; and a wireless transceiver coupled to the rate buffers 
for receiving the data packets from the rate buffers and for 
communicating the data packets over the wireless link. The data packets 
can be Fast Ethernet data packets and the network switch can include a 
100 mega-bits-per-second port for receiving the Fast Ethernet packets. 
The terminal can include a packet buffer for storing the data packets 
prior to storing the data packets in the rate buffer. The network switch 
can be a layer-two switch. The network switch can store the data packets 
in the packet buffer in response to a level of space available in the 
rate buffer, in response to rain fade in the wireless link, in response 
to interference in the wireless link, or in response to a detected bit 
error rate for communication via the wireless link. The terminal can 
include an extender device coupled to the broadcast device for receiving 
the data packets from the computer network and for providing the data 
packets to the broadcast device. 

French Abstract 

La presente invention concerne un precede et un dispositif de 
commutation Ethernet dans un terminal pour reseau radio metropolitain . 
Selon un aspect de 1' invention, un terminal pour liaison radio dans un 
reseau metropolitain comprend les elements suivants : commutateur dote 
d'un premier port destine a la reception de paquets de donnees en 
provenance d'un ordinateur et d'un second port pour 1 ' acheminement de ces 
paquets de donnees ; tampons de debit couples au commutateur reseau et 
recevant les paquets de donnees du second port ; et emetteur-recepteur 
radio couple aux tampons de debit dont il recoit des paquets de donnees 
pour les transmettre par radio. Ces paquets de donnees peuvent etre des 
paquets de donnees Ethernet Rapide et le commutateur de reseau pent 
inclure un port de 100 megabits/seconde pour la reception de ces paquets 
de donnees. Le terminal peut comporter un tampon pour le stockage de 
paquets de donnees avant de les stocker dans le tampon de debit. Le 
commutateur reseau peut etre un commutateur de couche deux. II peut 
stocker les paquets de donnees dans le tampon pour paquets en reponse a 
un volume d'espace disponible dans le tampon de debit, a un 
af f aiblissement du signal du a la pluie dans le reseau, a une 
interference dans la liaison radio ou a un taux d'erreur sur les bits 
detecte pour la communication via la liaison radio. Le terminal peut 
comporter un dispositif d' extension couple au dispositif de diffusion 
pour la reception de paquets de donnees a partir du reseau informatique 
et pour la fourniture de paquets de donnees au dispositif de diffusion. 

Fulltext Availability: 
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Detailed Description 

... to the 100BASE-T transceiver 212. Thus, latency-intolerant traffic 
will be transmitted via the wireless link 102 with minimal delay even 
during periods of rain fade or interference. 

In addition, the embodiment of the MAC 222^ illustrated in Fig. 16 
includes an encryption / decryption block 612 coupled between the rate 
control logic 250* and the rate buffers 252'. Accordingly.,. 
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Items Description 
102258 MAC OR (MEDIA? ? OR MEDIUM? ? OR MEDIASPECIFIC OR MEDIUMSP- 
ECIFIC) (IW)ACCESS??? ?( IW) ( CONTROL? ? ? ? OR CONTROLL??? ?) 

69367 CRYPTO OR CRYPTOGRAPH? OR CRYPTOSYSTEM? OR ENCRYPT? OR ENC- 
IPHER? OR ENCYPHER? 

24 001 DECRYPT? OR UNENCRYPT? OR UNENCIPHER? OR UNENCYPHER? OR DE- 
CIPHER? OR DECYPHER? OR UNCRYPT? OR UNCYPHER? OR UNCIPHER? 
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SECRET? OR SECURE? ? OR SECURING OR SECURITY? 

WIRELESS? OR WIRE () LESS OR MOBILE OR LAPTOP? ? OR LAP () TOP? 
OR TABLET 

OR NOTE 0 BOOK OR NOTEPAD OR THINKPAD OR 



PORTAB? OR NOTEBOOK 
NOTE OR THINK) ( ) PAD 
IPAQ OR PDD OR PDDS 
OR PDAS OR HANDSPRING 
OR PALM OR NEWTON OR 
6615 (PEN OR STYLUS OR 



OR HPC OR HPCS OR WINCE OR VISOR OR PDA 
OR PIM OR PIMS OR PALMPILOT OR PALMTOP 
BLACKBERRY 

POCKET) (2W) (COMPUTER? ? OR DEVICE?) 



38176 POCKETPC OR PERSONAL () INFORMATION () MANAGER? OR PERSONAL()(- 
DIGITAL OR DATA) {) (ASSISTANT? ? OR ORGANI?ER? ?) OR CELLPHONE? 
OR MOBILEPHONE? OR SCREENPHONE? 
270737 (RADIO OR SCREEN OR VIEW? OR SMART 
MOBILE OR WIRELESS? OR WIRE () LESS?? ? 
(TELEPHONE? OR PHONE? ? OR HANDSET? ? 
58190 RADIOPAGER? OR PAGER? OR PAGING (IW 
APPARATUS? OR APP?? ? OR TERMINAL? OR 
57210 RADIOPHONE? OR VIEWPHONE? OR 
15 PERSONAL ( ) DISPLAY? ( ) (DEVICE? 



OR CELL OR CELLULAR OR - 
OR FLIP OR DIGITAL) (IW)- 
OR HAND 0 SET? ?) 
(DEVICE? OR UNIT? ? OR - 
APPLIANCE?) 
SMARTPHONE? OR RADIOTELEPHONE? 
OR UNIT?? OR APPARATUS? OR AP- 



PORTABLE OR - 
HELD OR POCK- 



P?? ? OR TERMINAL? OR APPLIANCE? OR CLIENT? ? OR PC OR PCS OR 
COMPUTER? ?) 

1039900 SELFCONTAINED OR SELF () CONTAINED OR MOBILE OR 
WIRELESS? OR WIRE () LESS?? ? OR HANDHELD OR HAND ( 
ET OR IR OR INFRARED 
175316 S14(2W) (CLIENT? ? OR PC OR PCS OR COMPUTER? ? 

UNIT? ? OR APPARATUS?? OR APP?? ? OR ORGANI?ER? 
OR APPLIANCE?) 

7583 (VIDEO OR PICTURE OR MESSAGE OR CAMERA) (IW) (TELEPHONE? 
PHONE? ? OR HANDSET? ? OR HAND () SET? ?) 
54428 PALMSIZE? OR PALMHELD OR HANDY? ? OR FLIPPHONE? OR VIDEOPH- 
ONE? OR PICTUREPHONE? 
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OR 



DEVICE? OR 
TERMINAL? 
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Set Items Description 
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82 201 AU=BERGMAN J? 

53 1091 AU-HALL D? 

54 20254 MAC OR (MEDIA? ? OR MEDIUM? ? OR MEDIASPECI FIC OR MEDIUMSP- 

ECIFIC) (IW) ACCESS??? ?( IW) (CONTROL? ?? ? OR CONTROLL??? ?) 

55 4 S1:S3 AND S4 
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014885212 ^^Image available*^ 

WPI Acc No: 2002-705918/200276 

XRPX Acc No: N02-556502 

Secure wireless local area network device e.g. laptop computer has 
cryptography circuit which renders cryptographic information unusable by 
disconnecting battery from volatile memory, responsive to tampering 

Patent Assignee: HARRIS CORP (HARO ) 

Inventor: BERO^AN J ; DELLMO R ; HALL D W 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020095594 Al 20020718 US 2001761173 A 20010116 200276 B 

Priority Applications (No Type Date) : US 2001761173 A 20010116 
Patent Details : 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20020095594 Al 17 H04L-009/10 

Abstract (Basic) : US 20020095594 Al 

NOVELTY - A housing includes a cryptography circuit with a switch 
connected to a wireless transceiver, a media access controller . 
The switch disconnects battery from volatile memory rendering the 
cryptography information unusable, upon tampering the device. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Secure wireless local area network (LAN) system; and 

(2) Tamper resistant wireless local area network forming method. 
USE - Secure wireless local area network device such as laptop 

computer . 

ADVANTAGE - Provides greater security inexpensively with less 
complexity. 

DESCRIPTION OF DRAWING (S) - The figure shows a perspective view of 
the laptop computer, 
pp; 17 DwgNo 2/13 

Title Terms: SECURE; WIRELESS; LOCAL; AREA; NETWORK; DEVICE; COMPUTER; 

CIRCUIT; RENDER; CRYPTOGRAPHIC; INFORMATION; DISCONNECT; BATTERY; 

VOLATILE; MEMORY; RESPOND; TAMPER 
Derwent Class: TOl; WOl 

International Patent Class (Main) : H04L-009/10 
File Segment: EPI 



Manual Codes (EPI/S-X) : T01-M06A1A; W01-A05A; W01-A06B5A; W01-A06C4 
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DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent . All rts. reserv, 

014815328 **Image available** 

WPI Ago No: 2002-636034/200268 

XRPX Acc No: N02-502533 

Secure wireless local area network device has cryptography circuit which 
is connected to medium access controller and wireless transceiver 
for encrypting and decrypting address and data for communication 

Patent Assignee: HARRIS CORP (HARO ) 

Inventor: BERGMAN J ; DELLMO R ; HALL D W 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020094087 Al 20020718 US 2001760619 A 20010116 200268 B 

Priority Applications (No Type Date) : US 2001760619 A 20010116 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20020094087 Al 17 H04K-001/00 

Abstract (Basic) : US 20020094087 Al 

NOVELTY - A cryptography circuit (70) is connected to a wireless 
transceiver (50) and a medium access controller (60). The 
cryptography circuit encrypts/decrypts both address and the data 
information for transmission /reception . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for a 
secure wireless local area network provision method. 

USE - Secure wireless local area network (LAN) device. 

ADVANTAGE - Provides greater security without significant increase 
in cost and complexity, by using the cryptography circuit. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of a 
secure wireless LAN device. 

Wireless transceiver (50) 
Medium access controller (60) 

Cryptography circuit (70) 

pp; 17 DwgNo 7/13 

Title Terms: SECURE; WIRELESS; LOCAL; AREA; NETWORK; DEVICE; CIRCUIT; 

CONNECT; MEDIUM; ACCESS; CONTROL; WIRELESS; TRANSCEIVER; ADDRESS; DATA; 

COMMUNICATE 
Derwent Class: TOl; WOl 

International Patent Class (Main) : H04K-001/00 
File Segment: EPI 

Manual Codes (EPI/S-X) : TOl-DOl; T01-N02A2; W01-A05A; W01-A06B5A; W01-A06C4 
; W01-A06E1 
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DIALOG(R) File 349: (c) 2004 WIPO/Univentio . All rts. reserv. 

Patent Applicant /Inventor : 
... Designated only for: US) 
HALL David A . . . 

Fulltext Availability: 
Detailed Description 

Detailed Description 

adapted to execute any of the 
well-known MS-DOS, PC-DOS, OS/2, UNIX, MAC -OS, mainframe, 
minicomputer and Windows operating systems or other 
operating systems. General purpose computer 37... 



5/K/4 (Item 2 from file: 34 9) 

DIALOG (R) File 349: (c) 2004 WIPO/Univentio. All rts. reserv. 

Inventor ( s ) : 

. . . HALL Douglas 

Fulltext Availability: 
Detailed Description 

Detailed Description 

... damp equ h'00401 ;high damping size 
211 

212 

213 XhC gauge variables 
214 

215 mac aauae res 2 ;10 bit gauge position 

216 gauge-buffer res 2 ; gauge data buf f er . . . FilenwLe : Dsp 
angle . gag 

Date C. ' :eated:7/18/97 

4 Description: Display angle through MAC gauge 
Inputs- datal(b3,b2) angle (12.4 format) 
8 Returns: none 

10 Modified: addrl, mac -gauge 
Program Flow. 

14 ; ...Transfer 10 bits to driver chip 
16 ; 
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51 367103 MAC OR (MEDIA? ? OR MEDIUM? ? OR MEDIASPECI FIC OR MEDIUMSP- 

ECIFIC) (IW) ACCESS??? ?( IW) ( CONTROL? ? ? ? OR CONTROLL??? ?) 

52 242623 CRYPTO OR CRYPTOGRAPH? OR CRYPTOSYSTEM? OR ENCRYPT? OR ENC- 

IPHER? OR ENCYPHER? 

53 45532 DECRYPT? OR UNENCRYPT? OR UNENCIPHER? OR UNENCYPHER? OR DE- 

CIPHER? OR DECYPHER? OR UNCRYPT? OR UNCYPHER? OR UNCIPHER? 

54 4522640 SECRET? OR SECURE? ? OR SECURING OR SECURITY? 

55 2418378 WIRELESS? OR WIRE {) LESS OR MOBILE OR LAPTOP? ? OR LAP () TOP? 

? OR TABLET 

56 801426 PORTAB? OR NOTEBOOK OR NOTE () BOOK OR NOTEPAD OR THINKPAD OR 

(NOTE OR THINK) ( ) PAD 

57 ' 617044 IPAQ OR PDD OR PDDS OR HPC OR HPCS OR WINCE OR VISOR OR PDA 

OR PDAS OR HANDSPRING OR PIM OR PIMS OR PALMPILOT OR PALMTOP 
OR PALM OR NEWTON OR BLACKBERRY 

58 25600 (PEN OR STYLUS OR POCKET) (2W) (COMPUTER? ? OR DEVICE?) 

59 117774 POCKETPC OR PERSONAL () INFORMATION () MANAGER? OR PERSONAL()(- 

DIGITAL OR DATA) () (ASSISTANT? ? OR ORGANI?ER? ?) OR CELLPHONE? 
OR MOBILEPHONE? OR SCREENPHONE? 

510 771622 (RADIO OR SCREEN OR VIEW? OR SMART OR CELL OR CELLULAR OR - 

MOBILE OR WIRELESS? OR WIRE () LESS?? ? OR FLIP OR DIGITAL) (IW)- 
(TELEPHONE? OR PHONE? ? OR HANDSET? ? OR HAND () SET? ?) 

511 139162 RADIOPAGER? OR PAGER? OR PAGING (IW) (DEVICE? OR UNIT? ? OR - 

APPAEIATUS? OR APP?? ? OR TERMINAL? OR APPLIANCE?) 

512 106888 RADIOPHONE? OR VIEWPHONE? OR SMARTPHONE? OR RADIOTELEPHONE? 

513 72 PERSONAL 0 DISPLAY? ( ) (DEVICE? OR UNIT?? OR APPARATUS? OR AP- 

P?? ? OR TERMINAL? OR APPLIANCE? OR CLIENT? ? OR PC OR PCS OR 
COMPUTER? ?) 

514 3053628 SELFCONTAINED OR SELF () CONTAINED OR MOBILE OR PORTABLE OR - 

WIRELESS? OR WIRE () LESS?? ? OR HANDHELD OR HAND () HELD OR POCK- 
ET OR IR OR INFRARED 

515 603620 S14(2W) (CLIENT? ? OR PC OR PCS OR COMPUTER? ? OR DEVICE? OR 

UNIT? ? OR APPARATUS?? OR APP?? ? OR ORGANI?ER? OR TERMINAL? 
OR APPLIANCE?) 
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517 114747 PALMSIZE? OR PALMHELD OR HANDY? ? OR FLIPPHONE? OR VIDEOPH- 

ONE? OR PICTUREPHONE? 
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25/3, K/1 (Item 1 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06951970 Supplier Number: 58729279 (USE FORMAT 7 FOR FULLTEXT) 
No Wires Needed Acquires $5.5 Million in Venture Capital Funding. 
Business Wire, p0290 
Jan 20, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 621 

bit security architecture is the only solution in the industry that 
does not require bothersome encryption key management. The Company also 
has existing mediiam access controller ( MAC ) technology that enables 
the next generation of wireless LAN products. 

In 1999, No Wires Needed enjoyed a ten-fold increase in revenue over 



25/3, K/2 (Item 2 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06279598 Supplier Number: 54414369 (USE FORMAT 7 FOR FULLTEXT) 
Wireless: New Low Cost, High Performance Wireless Bridge From Wave Wireless 

Networking. (Wave Wireless Networking » SPEEDLAN XE-2 wireless) (Product 

Announcement) 

EDGE: Work-Group Computing Report, pNA 
April 12, 1999 

Language: English Record Type: Fulltext 
Article Type: Product Announcement 
Document Type: Newsletter; Trade 
Word Count: 450 

(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

...bridges but at a much lower cost. Unlike many products on the market 
today, advanced MAC layer filtering, IP Routing, data encryption and 
SNMP management are all included as standard features. SPEEDLAN XE-2 
supports everything from. . . 

...a Base Station, the XE-2 can support up to 16 remote locations. This 
single, self - contained unit can easily integrate into almost any 
network environment in just one afternoon. The SPEEDLAN XE... 



25/3, K/3 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

05832811 Supplier Number: 50343246 (USE FORMAT 7 FOR FULLTEXT) 
Protocol packs wireless voice, data 

Moy, T Dennis; Negus, Kevin J. 
Electronic Engineering Times, nl029, p76 
Oct 5, 1998 

Language: English Record Type: Fulltext 
Article Type: Article 

Document Type: Magazine/ Journal ; Trade 
Word Count: 1037 



CA access mechanisms. This is derived from the IEEE 802-11.1997, 
"IEEE Standard for Wireless LAN Medium Access Control and Physical 
Layer Specification," that was approved in June 1997. The MAC protocol will 
accommodate . . , 

...24-bit network ID. In addition, uses can ensure data security with three 
levels of encryption (none, medium, high) . 

In operation, the MAC protocol uses a "superframe, " which 
incorporates two contention-free periods (CFPs) and a contention period... 



25/3, K/7 (Item 1 from file: 160) 

DIALOG (R) File 160:Gale Group PROMT (R) 

(c) 1999 The Gale Group. All rts . reserv. 

02244540 

Business: Taurus Communications, Inc 

Satellite Communications August, 1989 p. 36 
ISSN: 0147-7439 



Scientific Atlanta has sold its mobile B- MAC encryption systems 
to Taurus Communications. The purchase leaves Taurus with 4% of B-MAC 
signal protection. . . 



33/3, K/2 (Item 1 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts . reserv. 

07571919 Supplier Number: 63494750 (USE FORMAT 7 FOR FULLTEXT) 

Buffalo Technology Launches AirStation; Affordable, Wi-Fi Compatible System 

Brings the Mobility, Speed and Security of Wireless Networking to the 

Masses . 

Business Wire, p2426 
July 17, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 

Word Count: 532 . 

throughout the AirStation network are protected. These features \ 
include a highly secure DSSS modulation platform, MAC addressing that 
"closes the door" to unregistered access, and a WEP 40-bit wireless 
packet encryption process that secures the data without sacrificing j 
throughput speed. ' 

Standardized Networking Means Additional Flexibility 

To. . . 



33/3, K/3 (Item 2 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06834178 Supplier Number: 57817274 (USE FORMAT 7 FOR FULLTEXT) 
Lucent WaveLAN Turbo PC Card Leads the Way in Price, Features. (wireless LAN 
adapter) (Hardware Review) (Evaluation) 

Molta, Dave 

Network Computing, p22 
Nov 29, 1999 

Language: English Record Type: Fulltext 
Article Type: Evaluation 
Document Type: Magazine/ Journal ; Trade 
Word Count: 1054 

... configure specialized parameters using tabbed dialog boxes. I 

easily enabled and disabled power management and encryption . On the 
downside, Lucent makes it easy for users to change the adapter's MAC ( 
Media Access Control ) address, a feature I've never quite understood, 
given that many wireless access points use MAC -address filtering for 
security purposes. 

Lucent also provides client software that makes it relatively easy. . . 



33/3, K/4 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06254356 Supplier Number: 54296224 (USE FORMAT 7 FOR FULLTEXT) 
New Low Cost, High Performance Wireless Bridge From Wave Wireless 
Networking . 

Business Wire, pl253 
April 6, 1999 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 479 



... of up to 25 miles, SPEEDLAN XE-2 provides many features common to 

more expensive wireless bridges but at a much lower cost. Unlike many 
products on the market today, advanced MAC layer filtering, IP Routing, 
data encryption and SNMP management are all included as standard 
features . 

SPEEDLAN XE-2 supports everything from... 



33/3, K/6 (Item 1 from file: 148) 

DIALOG {R) File 148: Gale Group Trade & Industry DB 
(c)2004 The Gale Group. All rts. reserv. 

07289525 SUPPLIER NUMBER: 16056664 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

iTran offers OLTP front end. (online transaction processing) (Independence 
Technologies Inc.) (Brief Article) (Product Announcement) 

Staten, James 

MacWEEK, v8, n25, pl8(l) 

June 20, 1994 

DOCUMENT TYPE: Product Announcement ISSN: 0892-8118 LANGUAGE: 

ENGLISH RECORD TYPE: FULLTEXT 

WORD COUNT: 201 LINE COUNT: 00016 

... basic banking functions, such as deposits and transfers, entered on 

the Newton. 

iTran for the Mac will be delivered in late summer; the Newton 
version will ship later this year. Data encryption capabilities will be 
available on request. iTran costs about $200 per client, depending on 
configuration. . . 



33/3, K/8 (Item 1 from file: 636) 

DIALOG CR) File 636: Gale Group Newsletter DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

04760318 Supplier Number: 64435072 (USE FORMAT 7 FOR FULLTEXT) 
BUFFALO TECHNOLOGY LAUNCHES AIRSTATION WLAN SOLUTION. 

LAN Product News, vl2, n9, pNA 
Sept, 2000 

Language: English Record Type: Fulltext 
Document Type : Newsletter; Trade 
Word Count: 525 

throughout the AirStation network are protected. These features 
include a highly secure DSSS modulation platform, MAC addressing that 
"closes the door" to unregistered access, and a WEP 40-bit wireless 
packet encryption process 

33/3, K/10 (Item 3 from file: 636) 

DIALOG (R) File 636: Gale Group Newsletter DB{TM) 
(c) 2004 The Gale Group. All rts. reserv. 

04535536 Supplier Number: 58672802 (USE FORMAT 7 FOR FULLTEXT) 

WAVE WIRELESS LAUNCHES SPEEDLAN WIRELESS PRODUCTS. (Product Announcement) 

LAN Product News, vl2, n2, pNA 
Feb, 2000 

Language: English Record Type: Fulltext 
Article Type: Product Announcement 
Document Type: Newsletter; Trade 
Word Count: 634 



. . . up to 25 miles, all Speedlan bridge/routers provide many features 

common to more expensive wireless bridges but at a much lower cost. 
Unlike many products on the market today, advanced MA.C layer filtering, 
IP Routing, data encryption and SNMP management are all included as 
standard features. 

Speedlan products are compatible with all... 

9 



41/3, K/1 (Item 1 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

08229390 Supplier Number: 68024926 (USE FORMAT 7 FOR FULLTEXT) 
INTERSIL INTROS ARM CHIPS FOR WIRELESS LAN. (Brief Article) (Product 
Announcement) 

Long, Mark 

Microprocessor Report, vl4, nil, p34 
Nov, 2000 

Language: English Record Type: Fulltext 
Article Type: Brief Article; Product Announcement 
Document Type: Newsletter; Trade 
Word Count: 142 

(USE FORMAT 7 FOR FDLLTEXT) 
TEXT: 

...ISL3856, an 802.11am ARM9-core-based chip that has been optimized for 
use in wireless hubs and gateways. Intersil ^s ISL3856 MAC chip for 
802.11b applications will also support mandatory data rates for 802.11a. In 
addition, the ISL3856 supports 128-bit encryption as well as 10- and 
lOOMb/s data rates through the chip's onboard Ethernet... 



41/3, K/2 (Item 2 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

07905510 Supplier Number: 66097535 (USE FORMAT 7 FOR FULLTEXT) 
Intersil Announces New PRISM ARM MAC Platforms For Wireless LAN 

Applications; Introduces new ^Access Point-on-a-chip * that reduces cost 

through higher integration. 

Business Wire, p2206 
Oct 16, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 1039 

••• 11a offerings, which will include complete chipsets, firmware, 

software, and radio reference designs. 

This newest MAC chip is based on the popular ARM9 core and is \ 
optimized for use in Access Points, which are basically wireless hubs or ^ 
gateways that give users a wireless link to the network and Internet. The 
new MAC can be used in 802.11b applications and will support mandatory 
data rates for 802... 

...first "Access Point-on-a-chip, " implementing both the 802.11 MAC 
protocol and the MAC bridging function. The ISL3856 includes an onboard 
Ethernet interface that supports both 10 and 100 Mbps data rates. It also 
supports 128-bit encryption , which offers the highest level of security 
for transmitted data. 

Packaging, Availability and Pricing 

The. . . / 
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07529505 Supplier Number: 63122663 (USE FORMAT 7 FOR FULLTEXT) 



3Com Introduces Industry's First Layer 3 Wireless LAN Security Solution. 

Business Wire, p0449 
July 5, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 7 66 

... LAN. The AirConnect solution currently features Wired Equivalent 

Privacy (WEP) — a standards-based Layer 2 encryption technique that 
secures data transmitted between wireless access points and PCs — as 
well as access control using wireless network card ( MAC layer) 
addresses. While WEP is adequate for smaller wireless installations, it 
is not sufficiently scaleable to meet the security needs of large corporate 
networks ... / 



41/3, K/4 (Item 4 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06855890 Supplier Number: 58063231 (USE FORMAT 7 FOR FULLTEXT) 
Lesson 137: Wireless LANs {802 . lib) . (Technology Information) (Tutorial) 

Angel, Jonathan 
Network, pNA 
Dec 1, 1999 

Language: English Record Type: Fulltext Abstract 
Article Type: Tutorial 

Document Type: Magazine/ Journal ; Trade 
Word Count: 2023 

... allows for 40-bit encryption; some vendors of 802.11b equipment 

offer optional 128-bit encryption or plan to make it available as a 
firmware upgrade. A few also sell wireless NICs that have been 
manufactured not only with a unique MAC address but also with a unique 
public/private key pair. Administrators can require that all... 

...any mismatches. This way, an attacker can be prevented from breaking 
into a network via MAC address masquerading. 
CUTTING ACCESS COST 

While valuable for the infrastructure network, features such as 
multiple ESSIDs, roaming, and 128-bit encryption increase the cost of 
hardware APs to around $1,000 each. Vendors such as Apple... 
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. . . Keep in mind, however, that most of the products have multiple 

security features, including data encryption , data scrambling, and user 
IDs. 

The IEEE committee has included both FHSS and DSSS techniques in its 
draft of the 802,11 wireless media access control ( MAC ) and 
physical (PHY) specifications. Similar to other IEEE standards in place, 
the 802.11 specification should help bring down the pricing of wireless 
LAN products by replacing proprietary solutions with mass produced standard 
chip sets. Advanced Micro Devices recently introduced an 802.11 compatible 
media access controller chip called the PCnet-Mobile for wireless 
LAN devices . For those of you who can't wait for the standard to be 
completed, nearly. . . 
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will use the SubNetwork Dependent Convergence Protocol or SNDCP and 
a data-link protocol called Mobile Data Link Protocol (MDLP) , which will 
give the user a direct connection to the router backbone. The MDLP uses 
MAC frames and sequence control to provide error detection and recovery, 
while the SNDCP provides segmentation, header compression, encryption , 
and authentication. The router network will provide key network attributes 
such as address resolution, roaming. . . 
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... Equivalent Privacy (WEP) protocol and power save. WEP refers to how 

the data frames are encrypted and offers a security option. To date, 
failures have been restricted to select pairs, with the problem residing in 
the MAC . 

"Another issue," says Froning, "and one that's not defined in the 
standard, is the... 
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This master thesis covers the construction of a simulator for simulating 
authentication of nodes and packages in a mobile packet radio network. 
The network is dynamic and changes topology continously which implies 
special demands. To accomplish a solution which includes the authentication 
on a low level, a new model of reference for communication has been 
developed. This model is based on the TCP/IP and includes an authentication 
layer below the network layer. The authentication layer authenticates nodes 
with a Dif f ie-Hellman algorithm working on an algebraic group, defined by 
an elliptic curve. IP-packages are authenticated by a MAC based on 
sessionkeys and plaintext hashed by the md5-f unktion . Each md5-sum is 
truncated to 32 bits due to the limited bandwidth. The simulator was 
implemented using the Maisie language which is a public domain software 
developed by a research group from UCLA, An evaluation of Maisie is 
included in the thesis. The result of this work is a simulator environment 



with focus on the authentication model. 
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Treatment: Practical (P) 

Abstract: This paper presents an advanced version of a configurable 
demonstrator platform developed for testing a new wireless local area 
network called TUTWLAN. TUTWLAN is targeted for limited service areas with 
stationary or portable terminals . Applications range from simple 

wireless sensors to multimedia laptops . The network supports the 
different quality of service (QoS) requirements of these applications. The 
improved development platform has been designed because of the restrictions 
discovered in the first prototype. The new platform provides a better 
testing environment for developing medium access control ( MAC ) 
protocols for TUTWLAN and for designing embedded stand-alone applications. 
Furthermore, various other designs can be tested, for example hardware 
implementations of encryption algorithms. Both the new and the old 
prototypes consist of a digital signal processor (DSP) , external memory 
modules for the DSP, and a field programmable gate array (FPGA) circuit. 
The platform is connected to a radio module and can be attached to a host 
computer using peripheral component interconnect (PCI) bus. Compared to the 
original platform, the new prototype contains more memory, a faster and 
larger FPGA, and a higher bit-rate radio. (18 Refs) 
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Publication Date: 2000 Country of Publication: USA 212 pp. 
ISBN: 0 7803 6364 7 Material Identity Number: XX-2001-00702 

Conference Title: 2000 IEEE Emerging Technologies Symposium on Broadband, 
Wireless Internet Access. Digest of Papers 
Conference Sponsor: IEEE 

Conference Date: 10-11 April 2000 Conference Location: Richardson, TX, 
USA 

Language: English Document Type: Conference Paper (PA) 
Treatment: Theoretical (T) 

Abstract: Data-over-Cable Service Interface Specifications (DOCSIS) 
developed by Cable Labs has been adopted by the International 
Telecommunication Union (ITU) as a draft Recommendation in ITU-T and ITU-R. 
Nortel Networks has been spearheading the BWA standards efforts in ITU-R, 
ITU-T and in IEEE 802.16, that uses the cable modem specifications as a 
basis for wireless access systems in order to achieve economies of scale. 
The cable modem technical parameters for physical and media access 

control layers have been adapted to the wireless environment to support 
a bidirectional wireless access system for interactive services. This 
paper presents the BWA (broadband wireless acceas) physical and media 

access control ( MAC ) standardization efforts that are in progress in 
IEEE 802.16 in the 10-40 GHz band, with a focus on the LMDS (local 
multipoint distribution service) band in the U.S. Nortel Networks is 
leading the effort to standardize the DOCSIS based parameters for PHY/ MAC 
standardization in IEEE 802.16, The services that will be supported by BWA 
systems include fast Internet access (supporting both IP and ATM traffic), 
video and interactive television. The key features of this BWA system are 
multiple quality of service (QoS) support, dynamic service management, 
support of real-time services along with cryptographic authentication of 
the users for protection against theft of service. (7 Refs) 
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Abstract: This paper presents a security scheme for a medium access \ 
control protocol in a new wireless local area network TUTWLAN (Tampere 

University of Technology WLAN) . The design objective has been to develop a 

security scheme that will be scalable for various needs and offer high 



security for demanding applications. The designed security scheme provides 
both privacy of wireless data communications and the authenticity of 
communicating parties. Our authentication scheme allows also the 
communicating entities to establish a shared secret key for secure 
communication session. Data security schemes have also been introduced. 
There are three optional data security modes that offer flexible ciphering 
and data security level. (7 Refs) 
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Abstract: Some people in the software industry are looking into 

home-control systems, much preferably without stringing new wires. This 
raises a simple issue: I have no more access to my power-lines than a 
thief has; and ditto (even more so) for wireless . 

Therefore, if we want the same security we now have by owning the 
wire, we need some kind of cryptologic authentication. 

The CPUs considered for this are quite underpowered (by today* s 
standards): 8051 or similar[l], 1KB flash EPROM, 64 bytes RAM, 128 
bytes EEPROM, and a peak IMHz instruction rate; that last figure is 
relatively very fast, since the wire is lOKBPS or less. 

In the classic study of access-control weaknesses, All Baba could 
replay the ''open'' message, using the authent icator ''simsim'' (or 
''sesame''); since replay attacks were not blocked, it did not matter 
how strong the 40 thieves' crypto & authentication was on other 
fronts. We therefore have to use EEPROM to keep track of a serial 
number, and get rid of replayed ones. 

To add to the problem, messages (including the authenticator ) had 
better be kept down to 8 bytes or so, to give them some decent chance 
to get through ail the line noise, with the wimpy power-supplies 
planned. 
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ABSTRACT: Personal computers are getting much smaller and easier to carry 
about in these days. LAN sockets providing network accessibility for 
those mobile computers are often set in public places like 
libraries, computer centers, and so on. However, it is difficult to 
prevent illegal access to networks in such cases. In this paper, we 
propose a protection method to cope with illegal access. Our method 
provides the following functions: (1) only valid users can access to 
the network, (2) preventing malicious users from invalid use of the 
network by IP and/or MAC address spoofing, and (3) no need for 
pre-registration of IP and/or MAC addresses. We have implemented this 
method as a system named LANA. The design and implementation of LANA 
are also discussed, (author abst.) 
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ABSTRACT: Configurations and functions of the MAC layer for the 
Ethernet-based wireless access system for the 5-GHz-band are 
introduced. The wireless interface between a terminal and an access 
point in this system is based on the IEEE 802.11 standard which employs 
the CSMA/CA scheme as the access protocol. CSMA/CA offers a synchronous 
service with a polling procedure in addition to the contention-based 
asynchronous service. Furthermore, the various functions, such as 
association, handoff, and authentication, are provided through the MAC 

management entity. This paper overviews the MAC layer, protocols, 
control schemes and their characteristics, (author abst.) 
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Abstract (Basic) : US 20040028016 Al 

NOVELTY - The network (10) has a policing node (13) to detect 
intrusions into mobile ad-hoc network (MANET ). Transmissions among 
nodes (11, 12) are monitored to detect transmissions during an 
unauthorized period. An intrusion alert is generated based upon 
detected transmissions during the unauthorized period. The policing 
node detects intrusions based upon integrity check values, which do not 
correspond with respective data packets. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for an 
intrusion detection method for a MANET. 

USE - Used as intrusion detection system for those that focus on 
intrusion in the upper OSI network layer. 

ADVANTAGE - The network detects network intrusion even when a rogue 
node has an authorized network or media access control 
identification ( MAC ID) . 

DESCRIPTION OF DE<AWING(S) - The drawing shows a schematic block 
diagram of a MANET. 

MANET (10) 

Nodes (11,12) 

Policing node (13) 

Rogue node (14) 
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Abstract (Basic) : EP 1379029 Al 

NOVELTY - The temporary address sets are created in wireless 
access node such that each set corresponds to unique media access 
control ( MAC ) address of a wireless terminal , and transmitted to 
corresponding wireless terminal . A data packet transmission is 
performed between the wireless terminal and the wireless access 
node by randomly selecting a temporary address from the address set as 
a source or destination address. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) a computer readable medium storing program for performing 
method of guaranteeing user's anonymity; and 

(2) a wireless local area network system. 

USE - For guaranteeing user's anonymity in wireless local area 
network . 

ADVANTAGE - The outflow of private information is prevented and the 
risk of attack by malicious user's is reduced, by using the temporary 
address which is randomly selected from the temporary address set. 

DESCRIPTION OF DRAWING (S) - The figure shows a flowchart describing 
a method of guaranteeing user's anonymity in a wireless LAN system. 
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Abstract (Basic) : US 20030200455 Al 

NOVELTY - A communication is established between a wireless 
station and a base station by a network management console (NMC) , and 
Internet protocol (IP) address is provided to the wireless station. 
The IP address of all wireless station is received and compared with 
media access control ( MAC ) address by the NMC, such that the IP 
address of specified wireless station is determined. The computer 
name of the wireless station is checked with the legal name list by 
NMC, based on which the service request from the wireless station is 
accepted /denied. 

USE - For providing security control and detecting attack in 
wireless local area network (LAN) connected to laptop computer, 
pocket computer and notebook computer provided in hospital, coffee 
shop, restaurant, airport, also acts as identity authentication for 
Radius server. 

ADVANTAGE - Provides user authentication effectively, thereby 
preventing service request from illegal user. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart 
explaining the process of security control and attack detection in 
wireless local area network, 
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TECHNOLOGY FOCUS - INDUSTRIAL STANDARDS - The wireless station 
confirms to IEEE 802.11 standards. 
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AU 2003229811 Al H04Q-007/22 Based on patent WO 200396719 

US 20040148374 Al G06F-015/173 

Abstract (Basic): GB 2388498 A 

NOVELTY - The identification information such as media access 
controller ( MAC ) address of wireless terminal , is received afte 
establishment of communication connection between the terminal and 
access point. The Internet protocol (IP) address of terminal is 
associated with MAC address. The data packets having IP address 
transceived between terminal and network, is compared with associated 
MAC address, to accept or discard packets. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for th 
following : 

(1) access point for setting communication connection; 

(2) computer program product for access point. 

USE - For ensuring address information of wireless terminal 



such as portable computer in communication network such as 
wireless local area network (LAN) . 

ADVANTAGE - Authenticity and integrity of accounting are enhanced, 
and checking confirmation of IP address is easily enhanced. 

DESCRIPTION OF DRAWING (S) - The figure shows a flowchart explaining 
the wireless terminal address checking process, 
pp; 28 DwgNo 1/3 
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Client authentication apparatus in internet, stores internet protocol 
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Abstract (Basic) : JP 2003303174 A 

NOVELTY - A managed table stores media access control ( MAC ) 
address of the router (20) and relationship between internet protocol 
(IP) address and MAC address of registered client terminals (10). The 
authentication apparatus checks the MAC address and the IP address of 
the authentication requirement client and the corresponding router with 
the registered information to authenticate the client for network 
connection . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
terminal authentication method. 

USE - For providing authentication to client terminals like 
personal digital assistant ( PDA ) , domestic appliance, 
audio/video apparatus, electronic office equipment like computer and 
printer to distribute musical, video information through internet, 
intranet. 

ADVANTAGE - Prevents the network access of users other than the 
registered clients. 



DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the computer network. (Drawing includes non-English language text) . 
client terminal (10) 
router (20) 

information server (31) 
management server (32) 
network (80) 
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Abstract (Basic) : EP 1345386 A2 

NOVELTY - The user terminals (100a, 100b) requiring access to 
wireless network, are authenticated at respective access points 
(120a, 120b), using media access control identifier ( MAC - ID). A 
user password received from each user terminal is authenticated by an 
authentication server (140) . The user terminals are allowed to access 
the network only if both terminal and password authentications are 
approved . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) password authentication client operation method; 



(2) password authentication server operation method; 

(3) authentication client; and 

(4) computer readable recorded medium storing access control 
program . 

USE - For controlling user access to wireless local area networks 
(WLANs) . 

ADVANTAGE - Since network access is allowed only after approval of 
both terminal and password authentications, improved security is 
ensured. 

DESCRIPTION OF DRAWING (S) - The figure shows a schematic view 
illustrating the network access control process. 
MAC protocol stacks {10a, 10b) 
user terminals (110a, 100b) 
access points (120a, 120b) 
authentication server (140) 
portal (150) 
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Abstract (Basic) : KR 2003018219 A 

NOVELTY - An ID certification method for certification offer and 
system thereof is provided, which copes with a security easily and 
stably although the security is violated or a new user exists. 

DETAILED DESCRIPTION - An access point receives a certification 
packet generated by a terminal (SHOO) . The access point checks the 
received certification packet ( S1200 ) . If the certification packet is a 
login packet, an MAC address is extracted from the login packet and a 



process that the extracted address is registered at a memory of the 
access point is determined { sl310 ) . If registration succeed, the access 
point transfers an ACK packet to the terminal (S1316) . If the 
certification packet is a logoff packet, there is judged whether an 
MAC address of the logoff packet is registered at a memory of the 
access point (S1410 ) . If not, the access point transfers an NAK packet 
to the terminal (S14 15 ) . If so, the access point deletes an MAC 
address of the terminal and transfers the ACK packet to the 
terminal (S14 11 ) . If the certification packet is neither the login 
packet nor the logoff packet, an MAC address of a general packet is 
extracted and there is judged whether an extracted address is 
registered at a memory of the access point (S1510 ) . If not, the general 
packet is discarded (S1516) . If so, a wireless LAN service is 
provided(S1511) . 
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Abstract (Basic) : US 20020196764 Al 

NOVELTY - Mobile stations (2-1 - 2-k) retrieve an access point 
(AP) (1) data management table held in it to check whether the MAC 
address of an AP which the station intends to make communication with, 
is present in the table. When the MAC address is not present in the 
table, the mobile station makes a public key authentication request 
to the AP, and if not makes a public key re-authentication request to 
the AP. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for 
authentication system. 

USE - For performing authentication in wireless LAN system. 

ADVANTAGE - Since the mobile station makes a public key 
re-authentication request to an access point when MAC address of the 



access point communicating with the station is not present in the data 
management table, the illegal re-authentication request is prevented 
thereby preventing unfair communication by illegal mobile station. 
Hence the authentication procedure is simplified. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the authentication system in wireless LAN system. 

access point (1) 
mobile stations (2-1 - 2-k) 
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Abstract (Basic) : GB 2366948 A 

NOVELTY - The subscribers (11,12) of the primary local area network 
(LAN) (1), communicate with operator of secondary LAN (4) regarding 
getting connected with each other using user intervention by enabling 
the visitor-authentication and authorization and accounting (V-AAA) 
server (6) of secondary LAN to communicate with Home-AAA server (2) of 
primary LAN. This linkage remains until the subscribers remain 
authorized by the operator. 

USE - User protocol for W-LAN systems . 

ADVANTAGE - The operator of the existing LAN can add new LAN sites 



or new partner operators without modifying the externally and 
internally established relationships. The extent to which wireless 
LAN subscribers can roam, is regulated. 

DESCRIPTION OF DRAWING (S) - The figures show the schematic diagram 
of the LAN. 

Primary LAN (1) 
H-AAA server (2) 
Secondary LAN (4) 
V-AAA server (6) 
Subscribers (11,12) 
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ABSTRACT 

PROBLEM TO BE SOLVED: To avoid illegal access by an illegal user and 
illegal use of a network resource without changing a packet format. 

SOLUTION: A wireless terminal (2-6) transmits a request first. A base 
station 1 relays the request, takes out the MAC address of the 
transmission origin and transmits a packet for the approval of the terminal 
to an approval server 7. When the approval server 7 receives the MAC 
address, it transmits an encoded session key. Then, the base station 1 
keeps the session key and transmits the packet of the response with the 
session key. The wireless terminal (2-6) keeps the session key and, 
hereinafter, calculates a CRC value according to a HASH value obtained by 
adding the session key to the header and payload of the MAC , and 
transmits the packet. When the base station 1 receives the packet, it 
compares the calculated CRC value according to the HASH value with the CRC 
value of the packet, and realizes approval for each packet. 
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ABSTFLACT 

PROBLEM TO BE SOLVED: To make performable transmission between terminals 
through a bridge device for conducting a predetermined processing such as a 
new encryption function different from encryption functionality 
provided in a wireless LAN (Local Area Network) . 

SOLUTION: In a network where at least one of terminals 200 and 210 existing 
in a wireless LAN communicates through a first MA.C ( Media Access 
Control ) bridge 310 of a wireless LAN base station, a second additional 
MAC bridge 100 for conducting a predetermined processing is connected to 
a wired LAN side of the first MAC bridge 310. The terminals 200 and 210 
and the second bridge 100 transmit and receive each other by tunneling a 
frame encapsulated with attachment of a header in which a MAC frame is 
made as a destination mutually. 



COPYRIGHT: (C) 2004, JPO 



25/9/7 (Item 1 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent. All rts. reserv. 

016348188 ^^Image available^^ 

WPI Acc No: 2004-506283/200448 

XRPX Acc No: N04-399974 

Interrupt level adjustment method in host system, involves adjusting 
interrupt moderation level of interrupt generating agent based on result 
of comparison of current system interrupt rate and threshold interrupt 
rate 
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Abstract (Basic) : US 20040123008 Al 

NOVELTY - The current system interrupt rate at a host system is 
determined by adding the interrupt rates from interrupt generating 
agents. The determined rate is compared with a threshold interrupt rate 
associated with the system. The interrupt moderation level at the agent 
is adjusted based on the comparison result. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) interrupt level adjusting system; 

(2) host system; and 

(3) article of manufacture for adjusting interrupt level. 

USE - For adjusting level of interrupt generated by interrupt 
generating agents e.g. input/output (I/O) controller such as gigabit 
ethernet media access controller { MAC ) , timer ^ codec, 
cryptographic device, keyboard, mouse, disk controller, serial and 
parallel ports to printer, scanner, network controller, modem, network 
interface card (NIC), small computer system interface (SCSI) controller 
and display device, for indicating arrival of packet in host system 
(claimed) such as personal computer, workstation, main frame computer, 
server, hand - held computer , palmtop computer , laptop 
computer, network switch, router, telephony device, network appliance 
and wireless device . 

ADVANTAGE - The interrupt rate obtained from the interrupt 
generating agents of the host system is controlled by adjusting 
interrupt moderation level of the agents . Hence throughput and 
performance of host system is increased and interrupts are not delayed 
when additional moderation is unnecessary, 

DESCRIPTION OF DRAWING (S) - The figure shows the flow diagram 
explaining the interrupt level adjustment method. 
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Abstract (Basic) : WO 200443018 Al 

NOVELTY - Predetermined number of data packet of same connection 
less than or equal to maximum number of data packets are transmitted in 
one container from a transmitting station to a receiving station. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) communication system for transmitting data packet; 

(2) data packet transmitting station; and 

(3) software program product for transmission of data packet. 
USE - For transmitting data packet in communication system 

(claimed) such as universal mobile telecommunication system (UMTS) . 

ADVANTAGE - Improves data packet transmission in unacknowledged 
mode transmission system without changing radio link control protocol 
for unacknowledged mode data transmission. Reduces the cost of 
improving data packet transmission and enables to decode and decrypt 
data transmitted on the logical channel on the receiving side even when 
more than one media access control protocol data unit gets lost 
during transmission or decoding process. 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic 
representation of the transmission of data packet in a single 
container . 

unacknowledged mode radio link control protocol data units (1-8) 
media access control layers (10,33) 
media access control service data units (11-18) 

containers (20,29) 
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Key generation method for data encryption in wireless local area 
network, involves combining intermediate value obtained by combining 



secret key and user specific medium access address, with predefined key 
change information 
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Abstract (Basic) : US 20040083362 Al 

NOVELTY - A secret key is selected and combined with a user 
specific medium access control ( MAC ) address to form an 
intermediate value. The intermediate value is combined with predefined 
key change information, and transformed to generate the secret keys. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) data encryption method; and 

(2) computer program product for performing data encryption 
process . 

USE - For generating data encryption key in wired and wireless 
local area network (LAN) . 

ADVANTAGE - The transmitted and received data packets are 
encrypted / decrypted efficiently. Thereby the overall encryption 
efficiency is improved, without the need to alter the data packet 
header . 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of the 
encryption / decryption system, 
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Technology Focus: 

TECHNOLOGY FOCUS - INDUSTRIAL STANDARDS - The secret key is defined 
in accordance with IEEE 802.11 standard. 
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Abstract (Basic) : GB 2394387 A 

NOVELTY - The communication processor has control element (56) that 
is arranged with the radio transceiver, is adapted to carry out data 
communication functions. The management element (50) physically spaced 
from the control element, carries out network security function such as 
authentication and data encryption functions, 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) media access control unit; and 

(2) wireless network operating method. 

USE - For security in wireless local area networks located in 
airports . 

ADVANTAGE - Manages the various frames between the base and 
receiver stations efficiently. 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic view of 
wireless network access point device. 
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Abstract (Basic) : WO 200434677 A2 

NOVELTY - The wireless communication system has nodes which 
comprise physical layer, virtual layer and application interface layer 
(101). The physical layer has a protocol layer (103), a media access 
control ( MAC ) layer (105) and a hardware abstraction layer (107) . 
DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(1) wireless communication method; and 

(2) wireless communication apparatus . 

USE - For gathering information such as seismic data, and for 
performing utility services monitoring for homes, businesses and 
municipalities, using wide area network (WAN) . 

ADVANTAGE - Avoids collisions and reduces the load in the network 
due to ring flooding. Reduces the variance in degree of path 
overlapping, hence improves overall network performance. Ensures 
dynamic communication routing with optimization and load balancing. 
Ensures virtual communication connections. Increases communication 
security by strong data encryption . Reduces communication fault 
tolerance without loss of data. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the wireless communication system. 

application interface layer (101) 

protocol layer (103) 
media access control layer (105) 

hardware abstraction layer (107) 
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Abstract (Basic) : JP 2004064326 A 

NOVELTY - The initial vector transmitted from a center apparatus 
(100) is encoded with a traffic key of subscriber apparatus (110) . The 
encoded vector is added with a frame containing a media access 
control ( MAC ) address from subscriber apparatus, to generate an 
encoded frame for the subscriber apparatus. The subscriber apparatus 
transmits a different encoded frame based on acquired vectors to the 
center apparatus. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) network system for security maintenance; and 

(2) security maintenance program. 

USE - For maintaining broadcasting security in network system 
(claimed) e.g. cable TV network and wireless local area network 
(LAN) . 

ADVANTAGE - By transmitting a different encryption frame 
containing the MAC address from the subscriber apparatus, the tapping 
on the network is prevented. 

DESCRIPTION OF DRAWING (S) - The figure shows an outline structure 
of network system. (Drawing includes non-English language text) . 

center apparatus (100) 

key detection unit (102) 

key generation unit (103) 

decoding unit (104) 

initial vector generation unit (107) 
encoder (108) 

subscriber apparatus (110) 
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Abstract (Basic) : KR 2003050881 A 

NOVELTY - A method for managing an encryption key in a wireless 
LAN system is provided to implement the security function of a broad 
band wireless LAN by partially correcting the process related the WEP 
of the inner access point (AP) without having an additional key 
management server and also by utilizing the additional WEP key for each 
of the users without correcting the IEEE 802.11 protocol. 

DETAILED DESCRIPTION - A method for managing an encryption key in 
a wireless LAN system includes the steps of: storing the master key 
by the access point (AP) , receiving the trial of connection from the 
subscriber's wireless station and creating a wired equivalent privacy 
(WEP) secret key (100) to the subscriber's wireless station by using 
the media access control ( MAC ) address of the subscriber's 
wireless station to be tried to connect and the stored master key. 
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Abstract (Basic) : US 20030142822 Al 

NOVELTY - A data key valid flag stored in a memory (7), is turned 
ON by a host unit (102), so as to validate the key data of a card held 
in a key data holding circuit (5) . The data to be recorded in a storage 
medium is enciphered / deciphered using the key data, when the key 



data flag is turned ON. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) storage apparatus; and 

(2) business method. 

USE - For controlling access to document information, image 
information including movie, audio information, program information, 
software information including games, personal information, business 
information stored in storage medium e.g. magneto-optical disk used in 
information processing apparatus e.g. personal computer, portable 
telephone, still and/or digital camera and television. 

ADVANTAGE - The illegal or unauthorized copies cannot be created, 
thereby security and copyright protection is enhanced. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the storage apparatus . 

enciphering / deciphering circuit (3) 

key data holding circuit (5) 

memory (7) 

host unit (102) 
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Interconnecting device e.g. switching hub establishes communication in 
computer network by allowing personal computers to communicate in network 
based on received media access control address of computers 

Patent Assignee: ALLIED TERRACES KK (ALTE-N) ; SATO T (SATO-I) 

Inventor: SATO T 

Number of Countries: 002 Number of Patents: 002 
Patent Family: 
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US 20030101340 Al 20030529 US 200263007 A 20020312 200357 B 
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Abstract (Basic) : US 20030101340 Al 

NOVELTY - The receivers in the interconnecting devices (10a, 10b) 
receive the media access control ( MAC ) address as an identifier 
of personal computers (30a-30c) from respective wireless 
communication devices (40a-40c) . The interconnecting devices 



establishes communication in computer network (100) by allowing the 
personal computers to communicate in the network based on the received 
MAC address. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for th 
following; 

(1) computer readable medium storing communication setting program 

and 

(2) communication setting method. 

USE - Interconnecting device such as switching hub for 
communication with wireless communication devices such as short 
distance wireless communication such as infrared radiation data 
communication such as IrDA and Bluetooth through computer network. 

ADVANTAGE - Prevents unauthorized access to computer networks usin 
the MAC address as device identifiers, thereby establishes 
communication with the interconnecting devices at high security and 
reliability. Since encoded and encrypted device identifiers are used 
the disclosure of identifiers in wireless devices are prevented. 
Also since the bandwidth of the interconnecting device is increased, 
efficient communication is performed in the computer network. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
the computer network. 

interconnecting devices (10a, 10b) 

personal computer (30a-30c) 
wireless communication devices (4 0a-4 0c) 

computer network (100) 
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Encrypting and decrypting information in e.g. wireless 

communication system using e.g. layer-2 MAC identity to form 

transmission encryption key 
Patent Assignee: MOTOROLA INC (MOTI ) 
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Number of Countries: 101 Number of Patents: 003 
Patent Family: 
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GB 2379588 A 37 H04L-009/00 
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EP 1428403 A2 E H04Q-007/38 Based on patent WO 200324140 

Designated States (Regional) : AL AT BE BG CH CY CZ DE DK EE ES FI FR GB 
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Abstract (Basic) : GB 2379588 A 

NOVELTY - Involves combining an individual identifier, e.g. layer-2 
MAC identity, related to transmission sender with a shared key to 
form a transmission encryption key. The key is then used to encrypt 
the transmission. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for a , 
communications system and unit. 

USE - For wireless communications e.g. in cellular telephone 
network or private mobile network or alternatively in IP data network 
where layer-3 source ID of packet is used as key modifier. 

ADVANTAGE - Does not require large numbers of shared keys to be 
simultaneously managed. 

DESCRIPTION OF DRAWING (S) - The drawing shows a block diagram of 
the system used to implement the method. 

pp; 37 DwgNo 5/5 

Title Terms: INFORMATION; WIRELESS ; COMMUNICATE; SYSTEM; LAYER; MAC ; 

IDENTIFY; FORM; TRANSMISSION; ENCRYPTION ; KEY 
Derwent Class: TOl; WOl 

International Patent Class (Main) : H04L-009/00; H04Q-007/38 
International Patent Class (Additional): H04L-009/14; H04L-029/06 
File Segment: EPI 

Manual Codes (EPI/S-X) : TOl-DOl; T01-N02B1; W01~A05A; W01-A07G; W01-B05A1 



25/9/17 (Item 11 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2004 Thomson Derwent. All rts. reserv. 

014885212 ^^Image available** 

WPI Acc No: 2002-705918/200276 

XRPX Acc No: N02-556502 

Secure wireless local area network device e.g. laptop computer has 
cryptography circuit which renders cryptographic information unusable 
by disconnecting battery from volatile memory, responsive to tampering 

Patent Assignee: HARRIS CORP (HARO ) 

Inventor: BERGMAN J; DELLMO R; HALL D W 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020095594 Al 20020718 US 2001761173 A 20010116 200276 B 

Priority Applications (No Type Date) : US 2001761173 A 20010116 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20020095594 Al 17 H04L-009/10 



Abstract (Basic) : US 20020095594 Al 



NOVELTY - A housing includes a cryptography circuit with a switch 
connected to a wireless transceiver, a media access controller . 

The switch disconnects battery from volatile memory rendering the 
cryptography information unusable, upon tampering the device. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Secure wireless local area network (LAN) system; and 

(2) Tamper resistant wireless local area network forming method. 
USE - Secure wireless local area network device such as laptop 

computer . 

ADVANTAGE - Provides greater security inexpensively with less 
complexity. 

DESCRIPTION OF DRAWING (S) - The figure shows a perspective view of 
the laptop computer . 
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Secure wireless local area network device has cryptography circuit 
which is connected to medium access controller and wireless 
transceiver for encrypting and decrypting address and data for 
communication 

Patent Assignee: HARRIS CORP (HARO ) 

Inventor: BERGMAN J; DELLMO R; HALL D W 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 
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Abstract (Basic) : US 20020094087 Al 

NOVELTY - A cryptography circuit (70) is connected to a wireless 
transceiver (50) and a medium access controller (60). The 
cryptography circuit encrypts / decrypts both address and the data 
information for transmission/reception . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for a 
secure wireless local area network provision method. 

USE - Secure wireless local area network (LAN) device. 
ADVANTAGE - Provides greater security without significant increase 
in cost and complexity, by using the cryptography circuit. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of a 
secure wireless LAN device . 
Wireless transceiver (50) 



Medium access controller (60) 
Cryptography circuit (70) 
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Communication, e.g. telephony, data transfer across air interface between 
satellite and ground terminal - segmenting data into partitions, 
protecting data from corruption, encrypting , interleaving to randomise 
correlated errors, and multiplexing onto physical transmission media 

Patent Assignee: HUGHES ELECTRONICS (HUGA ) 

Inventor: LABORDE E 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 
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Priority Applications (No Type Date): US 95496327 A 19950629 
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Abstract (Basic) : US 5689568 A 

The method of transferring communication data across an air 
interface comprises the steps of segmenting the communication data into 
96 uniform bit partitions, and protecting the data against corruption 
with forward error correction using a Golay code or with CRC checksum. 
The communication data is then encrypted for confidentiality using a 
bit-by-bit module-2 addition (XOR) and interleaved into a 12 by 16 
matrix to randomize errors. 

The communication data is next multiplexed onto a RF transmission 
media with control data into a number of superframes, each of which 
includes a number of frames having a multiplicity of time slots. The 
control data is located within a particular one of the time slots of 
each frame and the communication data is located in a different one of 
the time slots of each frame. 

USE - Mobile satellite system. 

ADVANTAGE - Optimizes for satellite propagation delays and hides 
physical transmission media from higher network layers. 
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DIALOG (R) File 610: Business Wire 

(c) 2004 Business Wire. All rts. reserv. 

00386286 20001016290B2062 (USE FORMAT 7 FOR FULLTEXT) 

Intersil Announces New PRISM ARM MAC Platforms For Wireless LAN 
Applications; Introduces new ^Access Point-on-a-chip » that reduces cost 
through higher integration 

Business Wire 

Monday, October 16, 2000 08:03 EDT 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 1, 0 63 

...11a offerings, which 

will include complete chipsets, firmware, software, and radio reference 

designs. c/^^\ 

This newest MAC chip is based on the popular ARM9 core and is optimized 

for 

use in Access Points, which are basically wireless hubs or gateways that 
give 

users a wireless link to the network and Internet. The new MAC can be 
used in 

802.11b applications and will support mandatory data rates for 802... 
. . . first "Access Point-on-a-chip, " 

implementing both the 802.11 MAC protocol and the MAC bridging function. 
The 

ISL3856 includes an onboard Ethernet interface that supports both 10 and 
100 

Mbps data rates. It also supports 128-bit encryption , which offers the 
highest 

level of security for transmitted data. 
Packaging, Availability and Pricing 
The. . . 

25/3, K/3 (Item 3 from file: 610) 

DIALOG{R) File 610:Business Wire 

(c) 2004 Business Wire. All rts. reserv. 

00321370 20000717199B3124 (USE FORMAT 7 FOR FULLTEXT) 

Buffalo Technology Launches AirStation; Affordable, Wi-Fi Compatible System 
Brings the Mobility, Speed and Security of Wireless Networking to the 
Masses 

Business Wire 

Monday, July 17, 2000 09:05 EDT 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 542 



...throughout the AirStation network are protected. These features 
include a highly secure DSSS modulation platform, MAC addressing that 
"closes 



the door" to unregistered access, and a WEP 40-bit wireless packet 
encryption 

process that secures the data without sacrificing throughput speed. 

Standardized Networking Means Additional Flexibility 
To. . . 



25/3, K/4 (Item 4 from file: 610) 

DIALOG (R) File 610: Business Wire 

(c) 2004 Business Wire. All rts, reserv. 

00314211 20000705187B5802 (USE FORMAT 7 FOR FULLTEXT) 

3Com Introduces Industry's First Layer 3 Wireless LAN Security Solution 

Business Wire 

Wednesday, July 5, 2000 15:26 EDT 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 7 64 

...LAN. The AirConnect solution currently features Wired 
Equivalent Privacy (WEP) — a standards-based Layer 2 encryption 
technique 

that secures data transmitted between wireless access points and PCs — 
as 

well as access control using wireless network card ( MAC layer) 
addresses . 

While WEP is adequate for smaller wireless installations, it is not 
sufficiently scaleable to meet the security needs of large corporate 
networks . . . 
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DIALOG (R) File 610:Business Wire 

(c) 2004 Business Wire. All rts. reserv. 

00176138 20000120020B0290 (USE FORMAT 7 FOR FULLTEXT) 

No Wires Needed Acqiaires $5.5 Million in Venture Capital Funding 

Business Wire 

Thursday, January 20, 2000 12:04 EST 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 636 

...bit security architecture 

is the only solution in the industry that does not require bothersome 
encryption key management. The Company also has existing medium access 
controller ( IMAC ) technology that enables the next generation of 
wireless LAN products. 

In 1999, No Wires Needed enjoyed a ten-fold increase in revenue over. . . 
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DIALOG (R) File 610: Business Wire 

(c) 2004 Business Wire. All rts. reserv. 

00161522 19991221355B1474 (USE FORMAT 7 FOR FULLTEXT) 

Wave Wireless Launches Industry's Fastest 11 MBPS Wireless Products 



Business Wire 

Tuesday, December 21, 1999 00:00 EST 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 6 99 

...up to 25 miles, all SPEEDLAN bridge/routers provide 

many features common to more expensive wireless bridges but at a much 
lower cost. Unlike many products on the market today, advanced MAC 
layer filtering, IP Routing, data encryption and SNMP management are 
all included as standard features. 

SPEEDLAN products are compatible with all... 

25/3, K/ 9 (Item 2 from file: 20) 

DIALOG (R) File 20: Dialog Global Reporter 
(c) 2004 The Dialog Corp. All rts . reserv. 

12879026 {USE FORMAT 7 OR 9 FOR FULLTEXT) 
3Com launches wireless LAN tools 

Fauziah Muhtar 

NEW STRAITS TIMES (MALAYSIA) 

September 18, 2000 

JOURNAL CODE: FNST LANGUAGE: English RECORD TYPE: FULLTEXT 
WORD COUNT: 527 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

AirConnect solution features wired equivalent privacy (WEP) , a 
standard-based 40-bit Layer 2 data encryption technique and access 
control using wireless network card ( MAC layer) addresses. 

For corporate customers who need to deliver wireless connectivity to 
hundreds or thousands of network users, security can be scaled up by 
utilising . . . 

25/3, K/10 (Item 3 from file: 20) 

DIALOG (R) File 20: Dialog Global Reporter 
(c) 2004 The Dialog Corp. All rts. reserv. 

12394 693 (USE FORMAT 7 OR 9 FOR FULLTEXT) 

3COM: 3Com introduces industry's first Layer 3 wireless LAN security 
solution; 3Com ' s wireless secure tunneling solution delivers simple, 
seamless and scaleable wireless LAN security for commercial customers 

M2 PRESSWIRE 
July 06, 2000 

JOURNAL CODE: WMPR LANGUAGE: English RECORD TYPE: FULLTEXT 
WORD COUNT: 74 2 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

... LAN. The AirConnect solution currently features Wired Equivalent 

Privacy (WEP) - a standards-based Layer 2 encryption technique that 
secures data transmitted between wireless access points and PCs - as well 
as access control using wireless network card ( MAC layer) addresses. 

While WEP is adequate for smaller wireless installations, it is not 
sufficiently scaleable to meet the security needs of large corporate 
networks . . . 
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DIALOG (R) File 20: Dialog Global Reporter 
(c) 2004 The Dialog Corp. All rts . reserv. 

04867677 (USE FORMAT 7 OR 9 FOR FULLTEXT) 

New Low Cost, High Performance Wireless Bridge From Wave Wireless 
Networking 

BUSINESS WIRE 
April 06, 1999 

JOURNAL CODE: WBWE LANGUAGE: English RECORD TYPE: FULLTEXT 
WORD COUNT: 551 

... of up to 25 miles, SPEEDLAN XE-2 provides many features common to 
more expensive wireless bridges but at a much lower cost. Unlike many 
products on the market today, advanced MAC layer filtering, IP Routing, 
data enciryption and SNMP management are all included as standard 
features . 
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DIALOG (R) File 647: CMP Computer Fulltext 
(c) 2004 CMP Media, LLC. All rts. reserv. 

01205441 CMP ACCESSION NUMBER: NWC19991129S0008 

Lucent WaveLAN Turbo PC Card Leads the Way in Price, Features 

Dave Molta 

NETWORK COMPUTING, 1999, n 1024, PG22 
PUBLICATION DATE: 991129 

JOURNAL CODE: NWC LANGUAGE: English 

RECORD TYPE: Fulltext 

SECTION HEADING: Sneak Previews 

WORD COUNT: 1052 

... configure specialized parameters using tabbed dialog boxes. I 

easily enabled and disabled power management and encryption . On the 
downside, Lucent makes it easy for users to change the adapter's MAC ( 
Media Access Control ) address, a feature I've never quite understood, 
given that many wireless access points use MAC - address filtering for 
security purposes . 

Lucent also provides client software that makes it relatively easy 



25/3, K/16 (Item 3 from file: 647) 

DIALOG (R) File 647: CMP Computer Fulltext 
(c) 2004 CMP Media, LLC. All rts. reserv. 

01174330 CMP ACCESSION NUMBER; EETl 9 98 1005S00 6 6 
Protocol packs wireless voice, data 

Kevin J. Negus, Technical Co-chairman, HRFWG, Dennis Moy, Marketing 

Chairman, HRFWG, Hewlett-Packard Co., Palo Alto, Calif. 
ELECTRONIC ENGINEERING TIMES, 1998, n 1029, PG76 
PUBLICATION DATE: 981005 

JOURNAL CODE: EET LANGUAGE: English 

RECORD TYPE: Fulltext 

SECTION HEADING: Signals Focus 

WORD COUNT: 1025 



... CA access mechanisms. This is derived from the IEEE 802-11.1997, 

"IEEE Standard for Wireless LAN Medium Access Control and Physical 
Layer Specification," that was approved in June 1997. The MAC protocol 
will accommodate up to six high-quality voice connections with 32- kbit/s 
ADPCM. . . 

...24-bit network ID. In addition, uses can ensure data security with 
three levels of encryption (none, medium, high) . 

In operation, the MAC protocol uses a "superframe, " which 
incorporates two contention-free periods (CFPs) and a contention period. . . 
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